In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb: scarlett2: Fix missing NULL check
scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1017-aws-64k | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub