ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration. Signed-off-by:Benoît Sevens <bsevens@google.com> Fixes: 1da177e4 ("Linux-2.6.12-rc2") Cc: stable@kernel.org Link: https://patch.msgid.link/20241120124144.3814457-1-bsevens@google.com Signed-off-by:
Takashi Iwai <tiwai@suse.de>
Loading
-
mentioned in commit e7c1fcdd
-
mentioned in commit 4e54dc4b
-
mentioned in commit 1102fb2a
-
mentioned in commit b61f346f
-
mentioned in commit 44a7b041
-
mentioned in commit 87768fcd
-
mentioned in commit a73fa041
-
mentioned in commit baecd141
-
mentioned in commit 42d02110
-
mentioned in commit clo/le/platform/mhi-host@0b4ea4bf
-
mentioned in commit clo/le/platform/mhi-host@cfc583e0
Please register or sign in to comment