8.4

CVE-2026-74497

ALSA: usb-audio: Clamp frame size in implicit-feedback mode

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Clamp frame size in implicit-feedback mode

snd_usb_handle_sync_urb() scales received sync packet sizes by the sender's
stride and stores the result directly in out_packet->packet_size[i]. If a
connected USB device sends an oversized sync packet, this frame count can
exceed ep->maxframesize.

The un-clamped frame count then propagates to the playback endpoint queue,
potentially driving packet transfers beyond the endpoint's hardware frame
limits.

Cap the calculated frame count against ep->maxframesize in
snd_usb_handle_sync_urb() to prevent oversized packets from entering the
playback queue.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 2d39fea6d3c19a2f5811d123114d92e3d0115fd1
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 09cf3dbbb4256a43feb91d2f51f274510a9ada47
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 56ac3e7c90f6b45969c3fd07a98fad760ffd6901
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < be97fea7451d758881b95af78e900dd0d58a382a
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 2db4535d6af79276a64449201c5be5feffb31c64
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 53f0aa37eb945f3c983f61d12fc35eb33debb8a9
Status affected
Version 28acb12014fb0c3e1edfdab1b1e3e266cf651550
Version < 8d7a30c50c2e58a6839634ed0acde14466d1dc61
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.8
Status affected
Version 0
Version < 3.8
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/56ac3e7c90f6b45969c3fd07a98fad760ffd6901
https://git.kernel.org/stable/c/be97fea7451d758881b95af78e900dd0d58a382a
https://git.kernel.org/stable/c/2db4535d6af79276a64449201c5be5feffb31c64
https://git.kernel.org/stable/c/53f0aa37eb945f3c983f61d12fc35eb33debb8a9
https://git.kernel.org/stable/c/8d7a30c50c2e58a6839634ed0acde14466d1dc61
https://git.kernel.org/stable/c/09cf3dbbb4256a43feb91d2f51f274510a9ada47
https://git.kernel.org/stable/c/2d39fea6d3c19a2f5811d123114d92e3d0115fd1
https://git.kernel.org/stable/c/cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be