CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

Remote code execution

USB Audio Class System Driver Remote Code Execution Vulnerability...

CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability

...

CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability

...

Microsoft USB Audio Class System Driver 安全漏洞

Microsoft USB Audio Class System Driver is an AVStream microdriver from Microsoft Corporation USA. A security vulnerability exists in Microsoft USB Audio Class System Driver. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected:...

CVE-2023-35303: Improper Input Validation

USB Audio Class System Driver Remote Code Execution Vulnerability...

kernel: ALSA: usb-audio: Fix potential memory leaks

A memory leak was found in the Linux kernel's USB audio driver in the synchronization endpoint URB allocation path. When memory allocation fails partway through allocating URBs for a sync endpoint, the error handling code fails to release the partially allocated URBs because the endpoint's URB...

SUSE CVE-2018-19824

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled in usbaudioprobe in sound/usb/card.c...

GSD-2023-1001987 ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()

ALSA: usb-audio: Fix possible NULL pointer dereference in sndusbpcmhasfixedrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001693 ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()

ALSA: usb-audio: Fix possible NULL pointer dereference in sndusbpcmhasfixedrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2022-1008332 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008278 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008211 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008020 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1007876 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007691 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-36466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.267 Description The issue concerns the ALSA usb-audio component, specifically the snd usbmidi output open function. It involves the removal of snd BUG ON from this function. The actual impact and potential...

PT-2022-36533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description The issue concerns the ALSA usb-audio component, specifically the snd usbmidi output open function. It involves the removal of a snd BUG ON call. The actual impact and potential for attack...

PT-2022-36275

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.156 Description The issue concerns the ALSA usb-audio component, specifically the snd usbmidi output open function. It involves the removal of a snd BUG ON call. The actual impact and potential for...

GSD-2022-1007671 ALSA: usb-audio: Fix potential memory leaks

ALSA: usb-audio: Fix potential memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...