CVE-2022-48701
Assigner: Linux
Published: 2024-05-03T15:12:34.160Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and
the number of it's interfaces less than 4, an out-of-bounds read bug occurs
when parsing the interface descriptor for this device.

Fix this by checking the number of interfaces.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: b970518014f2
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 91904870370f
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 2a308e415d24
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 0492798bf8df
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 6123bec8480d
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 98e8e67395cc
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 8293e61bbf90
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: e53f47f6c1a5
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.9.328
lessThanOrEqual: 4.9.*
status: unaffected
versionType: custom
version: 4.14.293
lessThanOrEqual: 4.14.*
status: unaffected
versionType: custom
version: 4.19.258
lessThanOrEqual: 4.19.*
status: unaffected
versionType: custom
version: 5.4.213
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.143
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.68
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 5.19.9
lessThanOrEqual: 5.19.*
status: unaffected
versionType: custom
version: 6.0
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
x_generator: engine: bippy-d175d3acf727