In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is being released. For fixing the race, make sure to cancel the pending work at closing.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49545.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49545.json"
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "199382432525955769303682082840779157021",
"length": 79.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11868ca21585561659c2575b0d6508ef8e9c4291",
"signature_type": "Function",
"id": "CVE-2022-49545-06bda187",
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_close"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"193730553696561287237933282308801643151",
"159708349651047037023965800819678135778",
"67730124946230519222269272511894723093",
"70271787628413746599954063439917989903"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e5fe2b6065541c6216a7a003b0cddf386be0d2d",
"signature_type": "Line",
"id": "CVE-2022-49545-36980df9",
"target": {
"file": "sound/usb/midi.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"193730553696561287237933282308801643151",
"159708349651047037023965800819678135778",
"67730124946230519222269272511894723093",
"70271787628413746599954063439917989903"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11868ca21585561659c2575b0d6508ef8e9c4291",
"signature_type": "Line",
"id": "CVE-2022-49545-4c252525",
"target": {
"file": "sound/usb/midi.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "199382432525955769303682082840779157021",
"length": 79.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e5fe2b6065541c6216a7a003b0cddf386be0d2d",
"signature_type": "Function",
"id": "CVE-2022-49545-5a8fbf4a",
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_close"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "199382432525955769303682082840779157021",
"length": 79.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517dcef4d2dda0132648f1e4c079ed17bba4d1a4",
"signature_type": "Function",
"id": "CVE-2022-49545-9252f7d1",
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_close"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"193730553696561287237933282308801643151",
"159708349651047037023965800819678135778",
"67730124946230519222269272511894723093",
"70271787628413746599954063439917989903"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0125de38122f0f66bf61336158d12a1aabfe6425",
"signature_type": "Line",
"id": "CVE-2022-49545-a7060a15",
"target": {
"file": "sound/usb/midi.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "199382432525955769303682082840779157021",
"length": 79.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40bdb5ec957aca5c5c1924602bef6b0ab18e22d3",
"signature_type": "Function",
"id": "CVE-2022-49545-b8562549",
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_close"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"193730553696561287237933282308801643151",
"159708349651047037023965800819678135778",
"67730124946230519222269272511894723093",
"70271787628413746599954063439917989903"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40bdb5ec957aca5c5c1924602bef6b0ab18e22d3",
"signature_type": "Line",
"id": "CVE-2022-49545-d1da1e2e",
"target": {
"file": "sound/usb/midi.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"193730553696561287237933282308801643151",
"159708349651047037023965800819678135778",
"67730124946230519222269272511894723093",
"70271787628413746599954063439917989903"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517dcef4d2dda0132648f1e4c079ed17bba4d1a4",
"signature_type": "Line",
"id": "CVE-2022-49545-f326e504",
"target": {
"file": "sound/usb/midi.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "199382432525955769303682082840779157021",
"length": 79.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0125de38122f0f66bf61336158d12a1aabfe6425",
"signature_type": "Function",
"id": "CVE-2022-49545-f534fab9",
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_close"
}
}
]