Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
4fa0e81b83503900be277e6273a79651b375e288 to < 5436bc1b07d4656f99412dc72871d250d7d55205affected4fa0e81b83503900be277e6273a79651b375e288 to < 0da05fedf5e1966b7e7d389866cb86fcf09f4b32affected4fa0e81b83503900be277e6273a79651b375e288 to < f14bd323eec4b4f0ef662520ec852e593ece1d4caffected4fa0e81b83503900be277e6273a79651b375e288 to < ab5ba9fd138758ddc50222264ff246b31e397abfaffected4fa0e81b83503900be277e6273a79651b375e288 to < ba036305323814ec1f8655313b2fa6a0f7048716affected4fa0e81b83503900be277e6273a79651b375e288 to < 4d7893a137eadb6163ea4298bf67d74b811d76efaffected4fa0e81b83503900be277e6273a79651b375e288 to < a0b78639ef09b2e77974a3de3b1c07f6de3c5e56affected4fa0e81b83503900be277e6273a79651b375e288 to < 3c318f97dcc50b2e0556a1813bd6958678e881fdaffected44f059fb742aac78cffdab5e0d8fe0c9910c1dedaffectedc25a53781f61c78bf2a2fa308bbd35b42ba346f6affected3.0.81 to < 3.1affected3.2.47 to < 3.3affected
Linux Linux
Default version status: affected
3.3affected0 to < 3.3unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.140 to ≤ 6.6.*unaffected6.12.86 to ≤ 6.12.*unaffected6.18.27 to ≤ 6.18.*unaffected7.0.4 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5436bc1b07d4656f99412dc72871d250d7d55205 ↗
- https://git.kernel.org/stable/c/0da05fedf5e1966b7e7d389866cb86fcf09f4b32 ↗
- https://git.kernel.org/stable/c/f14bd323eec4b4f0ef662520ec852e593ece1d4c ↗
- https://git.kernel.org/stable/c/ab5ba9fd138758ddc50222264ff246b31e397abf ↗
- https://git.kernel.org/stable/c/ba036305323814ec1f8655313b2fa6a0f7048716 ↗
- https://git.kernel.org/stable/c/4d7893a137eadb6163ea4298bf67d74b811d76ef ↗
- https://git.kernel.org/stable/c/a0b78639ef09b2e77974a3de3b1c07f6de3c5e56 ↗
- https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗