In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-mixer: us16x08: validate meter packet indices
getmeterlevelsfromurb() parses the 64-byte meter packets sent by the device and fills the per-channel arrays meterlevel[], complevel[] and masterlevel[] in struct sndus16x08meterstore.
Currently the function derives the channel index directly from the meter packet (MUB2(meter_urb, s) - 1) and uses it to index those arrays without validating the range. If the packet contains a negative or out-of-range channel number, the driver may write past the end of these arrays.
Introduce a local channel variable and validate it before updating the arrays. We reject negative indices, limit meterlevel[] and complevel[] to SNDUS16X08MAXCHANNELS, and guard masterlevel[] updates with ARRAYSIZE(masterlevel).
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68783.json"
}