In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device.
Fix this by checking the number of interfaces.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 3, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2025 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dtb-caviumUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade ocfs2-kmp-rt | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-iotUpgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-gcp-4.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-azure-5.4Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-gkeop-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-ibm-5.4Upgrade linux-riscv-5.15Upgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-aws | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub