In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device.
Fix this by checking the number of interfaces.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2025 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-azure-baseUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-preemptUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-devel-rt | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-gkeopUpgrade linuxUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-hwe-5.4Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fde-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-iotUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-azure-fdeUpgrade linux-kvmUpgrade linux-hweUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gkeop-5.15Upgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-gcp-4.15Upgrade linux-hwe-5.15 | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub