In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix an out-of-bounds bug in _sndusbparseaudio_interface()
There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device.
Fix this by checking the number of interfaces.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"100623411815116097688980505371582653575",
"259419971986281934236413780425413462723",
"103013356348037280684905420554245431699",
"63704807239903139342956872934758244738"
]
},
"signature_type": "Line",
"target": {
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91904870370fd986c29719846ed76d559de43251",
"id": "CVE-2022-48701-28df2039"
},
{
"digest": {
"length": 2504.0,
"function_hash": "236851730521348144355447069241754183173"
},
"signature_type": "Function",
"target": {
"function": "snd_usb_parse_audio_interface",
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a308e415d247a23d4d64c964c02e782eede2936",
"id": "CVE-2022-48701-387ee025"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"100623411815116097688980505371582653575",
"259419971986281934236413780425413462723",
"103013356348037280684905420554245431699",
"63704807239903139342956872934758244738"
]
},
"signature_type": "Line",
"target": {
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a308e415d247a23d4d64c964c02e782eede2936",
"id": "CVE-2022-48701-44376bee"
},
{
"digest": {
"length": 5642.0,
"function_hash": "137531654022571558554349661342344643545"
},
"signature_type": "Function",
"target": {
"function": "snd_usb_parse_audio_interface",
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91904870370fd986c29719846ed76d559de43251",
"id": "CVE-2022-48701-733298a0"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"100623411815116097688980505371582653575",
"259419971986281934236413780425413462723",
"103013356348037280684905420554245431699",
"63704807239903139342956872934758244738"
]
},
"signature_type": "Line",
"target": {
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0492798bf8dfcc09c9337a1ba065da1d1ca68712",
"id": "CVE-2022-48701-99add92c"
},
{
"digest": {
"length": 2648.0,
"function_hash": "317669061319862376754646114031586245847"
},
"signature_type": "Function",
"target": {
"function": "__snd_usb_parse_audio_interface",
"file": "sound/usb/stream.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0492798bf8dfcc09c9337a1ba065da1d1ca68712",
"id": "CVE-2022-48701-edd11aec"
}
]