5.5

CVE-2026-46146

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

The convert_chmap_v3() has a loop with its increment size of
cs_desc->wLength, but we forgot to validate cs_desc->wLength itself,
which may lead to potential endless loop by a malformed descriptor.

Add a proper size check to abort the loop for plugging the hole.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4.297 < 5.5
Linux ≫ Linux Kernel Version >= 5.10.241 < 5.10.258
Linux ≫ Linux Kernel Version >= 5.15.190 < 5.15.209
Linux ≫ Linux Kernel Version >= 6.1.149 < 6.1.175
Linux ≫ Linux Kernel Version >= 6.6.103 < 6.6.140
Linux ≫ Linux Kernel Version >= 6.12.43 < 6.12.88
Linux ≫ Linux Kernel Version >= 6.15.11 < 6.16
Linux ≫ Linux Kernel Version >= 6.16.2 < 6.17
Linux ≫ Linux Kernel Version >= 6.17.1 < 6.18.30
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.7
Linux ≫ Linux Kernel Version6.17 Update-
Linux ≫ Linux Kernel Version6.17 Updaterc2
Linux ≫ Linux Kernel Version6.17 Updaterc3
Linux ≫ Linux Kernel Version6.17 Updaterc4
Linux ≫ Linux Kernel Version6.17 Updaterc5
Linux ≫ Linux Kernel Version6.17 Updaterc6
Linux ≫ Linux Kernel Version6.17 Updaterc7
Linux ≫ Linux Kernel Version7.1 Updaterc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://git.kernel.org/stable/c/e0e3dcf48189603f3865f1a0b799b3b42baae96d
Patch
https://git.kernel.org/stable/c/4e0ee232ebe3df04874125d7c7f3e6c25ea5483d
Patch
https://git.kernel.org/stable/c/be09b47ed8677d76962e3240c145502e2ad9f3c8
Patch
https://git.kernel.org/stable/c/fa5b19ce69067874b1413f3c2027563bae8c2cb3
Patch
https://git.kernel.org/stable/c/6e7247d8f5fefeceb0bb9cc80a5388a636b219cd
Patch
https://git.kernel.org/stable/c/076d5d13eb9c1ad259a7f246149f6676c62285f9
Patch
https://git.kernel.org/stable/c/24a40df79307ca7ca0eec0889361cf6ac146d72a
Patch
https://git.kernel.org/stable/c/316aa0b1e3c5600eae5ab876394c1ac70e6db581
Patch