In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device.
Fix this by checking the number of interfaces.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | May 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2025 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-devel | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-gkeop-5.15Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-aws-5.4Upgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-realtimeUpgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-iotUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-gkeopUpgrade linux-gkeUpgrade linux-azure-fde-5.15Upgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-oracle-5.15 | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub