NetSight
high7.1

CVE-2022-48701

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be…

Impact

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device. Fix this by checking the number of interfaces.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.328
from 4.10 before 4.14.293
from 4.15 before 4.19.258
from 4.20 before 5.4.213
from 5.5 before 5.10.143
from 5.11 before 5.15.68

Weakness classification

References