In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Drop sndBUGON() from sndusbmidioutput_open()
sndusbmidioutputopen() has a check of the NULL port with sndBUGON(). sndBUGON() was used as this shouldn't have happened, but in reality, the NULL port may be seen when the device gives an invalid endpoint setup at the descriptor, hence the driver skips the allocation. That is, the check itself is valid and sndBUG_ON() should be dropped from there. Otherwise it's confusing as if it were a real bug, as recently syzbot stumbled on it.
[
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-1ea294cb",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c43991065f36f7628cd124e037b8750c4617a7a7"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-2001ebd2",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@368a01e5064c13946d032ab1d65ba95020a39cc5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-2b379902",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7dc436aea80308a9268e6d2d85f910ff107de9b"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-31515d58",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c43991065f36f7628cd124e037b8750c4617a7a7"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-37fc2103",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00f5f1bbf815a39e9eecb468d12ca55d3360eb10"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-3ef81ea8",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a80369c8ca50bc885d14386087a834659ec54a54"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-4389d0d8",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@872c9314769e89d8bda74ff3ac584756a45ee752"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-83890052",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@872c9314769e89d8bda74ff3ac584756a45ee752"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-a36fd1e1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@368a01e5064c13946d032ab1d65ba95020a39cc5"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-a3a4ac43",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad72c3c3f6eb81d2cb189ec71e888316adada5df"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-ab6fe0e5",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a80369c8ca50bc885d14386087a834659ec54a54"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-b149f663",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad72c3c3f6eb81d2cb189ec71e888316adada5df"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-bd04b6b4",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00f5f1bbf815a39e9eecb468d12ca55d3360eb10"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-d26aec7a",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7dc436aea80308a9268e6d2d85f910ff107de9b"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200422577479043817865080385272310745793",
"215066462195072829341929690221331095883",
"40989868670184929203063954574934248906",
"269887960149455989392515909295542306312",
"188024693844144664329895427758257891810",
"147340563929742649945363986064104427121",
"31683634437599124484661695047991931100"
]
},
"target": {
"file": "sound/usb/midi.c"
},
"signature_version": "v1",
"id": "CVE-2022-49772-d948ea3d",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02b94885b2fdf1808b1874e009bfb90753f8f4db"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "165376474390391530731350200751094335361",
"length": 556.0
},
"target": {
"file": "sound/usb/midi.c",
"function": "snd_usbmidi_output_open"
},
"signature_version": "v1",
"id": "CVE-2022-49772-e7c01b01",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02b94885b2fdf1808b1874e009bfb90753f8f4db"
}
]