Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46146

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to validate cs_desc->wLength itself, which may lead to potential endless loop by a malformed descriptor. Add a proper size check to abort the loop for plugging the hole.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 786571b10b1ae6d90e1242848ce78ee7e1d493c4 to < 076d5d13eb9c1ad259a7f246149f6676c62285f9affected
  • 275e37532e8ebe25e8a4069b2d9f955bfd202a46 to < 316aa0b1e3c5600eae5ab876394c1ac70e6db581affected
  • 47ab3d820cb0a502bd0074f83bb3cf7ab5d79902 to < 24a40df79307ca7ca0eec0889361cf6ac146d72aaffected
  • 1034719fdefd26caeec0a44a868bb5a412c2c1a5 to < e0e3dcf48189603f3865f1a0b799b3b42baae96daffected
  • ae17b3b5e753efc239421d186cd1ff06e5ac296e to < 4e0ee232ebe3df04874125d7c7f3e6c25ea5483daffected
  • ecfd41166b72b67d3bdeb88d224ff445f6163869 to < be09b47ed8677d76962e3240c145502e2ad9f3c8affected
  • ecfd41166b72b67d3bdeb88d224ff445f6163869 to < fa5b19ce69067874b1413f3c2027563bae8c2cb3affected
  • ecfd41166b72b67d3bdeb88d224ff445f6163869 to < 6e7247d8f5fefeceb0bb9cc80a5388a636b219cdaffected
  • 799c06ad4c9c790c265e8b6b94947213f1fb389caffected
  • dfdcbcde5c20df878178245d4449feada7d5b201affected
  • 7ef3fd250f84494fb2f7871f357808edaa1fc6ceaffected
  • 5.10.241 to < 5.10.258affected
  • 5.15.190 to < 5.15.209affected
  • 6.1.149 to < 6.1.175affected
  • 6.6.103 to < 6.6.140affected
  • 6.12.43 to < 6.12.88affected
  • 5.4.297 to < 5.5affected
  • 6.15.11 to < 6.16affected
  • 6.16.2 to < 6.17affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References