In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Stop parsing channels bits when all channels are found.
If a usb audio device sets more bits than the amount of channels it could write outside of the map array.
[
{
"target": {
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"27600825677275542334411659022078959320",
"334320047207699341238636748450111909135",
"48686596768088545209077108741845280118",
"75753675025525458534936881326786440631",
"139646541366106955011939762597382879949",
"248497248796727637225136848492862893794"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8a24fd281dcdf3c926413dafbafcf35cde517a9",
"deprecated": false,
"id": "CVE-2024-27436-24fa256e",
"signature_type": "Line"
},
{
"target": {
"function": "convert_chmap",
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"length": 1469.0,
"function_hash": "199441347524636118457890115705037819123"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d88b289fb0a8d055cb79d1c46a56aba7809d96d",
"deprecated": false,
"id": "CVE-2024-27436-3fb8c8cd",
"signature_type": "Function"
},
{
"target": {
"function": "convert_chmap",
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"length": 1469.0,
"function_hash": "199441347524636118457890115705037819123"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e2c1b0f6dd9abde9e60f0f9730026714468770f",
"deprecated": false,
"id": "CVE-2024-27436-4cfff153",
"signature_type": "Function"
},
{
"target": {
"function": "convert_chmap",
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"length": 1469.0,
"function_hash": "199441347524636118457890115705037819123"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8a24fd281dcdf3c926413dafbafcf35cde517a9",
"deprecated": false,
"id": "CVE-2024-27436-68eeb8cf",
"signature_type": "Function"
},
{
"target": {
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"27600825677275542334411659022078959320",
"334320047207699341238636748450111909135",
"48686596768088545209077108741845280118",
"75753675025525458534936881326786440631",
"139646541366106955011939762597382879949",
"248497248796727637225136848492862893794"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e2c1b0f6dd9abde9e60f0f9730026714468770f",
"deprecated": false,
"id": "CVE-2024-27436-79dbe7be",
"signature_type": "Line"
},
{
"target": {
"function": "convert_chmap",
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"length": 1469.0,
"function_hash": "199441347524636118457890115705037819123"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@629af0d5fe94a35f498ba2c3f19bd78bfa591be6",
"deprecated": false,
"id": "CVE-2024-27436-8c7e1362",
"signature_type": "Function"
},
{
"target": {
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"27600825677275542334411659022078959320",
"334320047207699341238636748450111909135",
"48686596768088545209077108741845280118",
"75753675025525458534936881326786440631",
"139646541366106955011939762597382879949",
"248497248796727637225136848492862893794"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@629af0d5fe94a35f498ba2c3f19bd78bfa591be6",
"deprecated": false,
"id": "CVE-2024-27436-a9b64e38",
"signature_type": "Line"
},
{
"target": {
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"27600825677275542334411659022078959320",
"334320047207699341238636748450111909135",
"48686596768088545209077108741845280118",
"75753675025525458534936881326786440631",
"139646541366106955011939762597382879949",
"248497248796727637225136848492862893794"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cd466673b34bac369334f66cbe14bb77b7d7827",
"deprecated": false,
"id": "CVE-2024-27436-bf312492",
"signature_type": "Line"
},
{
"target": {
"function": "convert_chmap",
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"length": 1469.0,
"function_hash": "199441347524636118457890115705037819123"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cd466673b34bac369334f66cbe14bb77b7d7827",
"deprecated": false,
"id": "CVE-2024-27436-e355e4a6",
"signature_type": "Function"
},
{
"target": {
"file": "sound/usb/stream.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"27600825677275542334411659022078959320",
"334320047207699341238636748450111909135",
"48686596768088545209077108741845280118",
"75753675025525458534936881326786440631",
"139646541366106955011939762597382879949",
"248497248796727637225136848492862893794"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d88b289fb0a8d055cb79d1c46a56aba7809d96d",
"deprecated": false,
"id": "CVE-2024-27436-f32fd9c2",
"signature_type": "Line"
}
]