CVE-2024-53197
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A bogus device can provide a bNumConfigurations value that exceeds the
initial value used in usb_get_configuration for allocating dev->config.
This can lead to out-of-bounds accesses later, e.g. in
usb_destroy_configuration.
Summary dbcve.org
A memory corruption vulnerability exists in the Linux kernel's ALSA usb-audio driver where a malicious USB device can report a bNumConfigurations value larger than the initially allocated buffer size. This occurs because the driver doesn't validate the device-reported configuration count against the pre-allocated dev->config array, leading to out-of-bounds memory accesses when usb_destroy_configuration attempts to free resources.
Mitigation
Apply the upstream Linux kernel patch that adds proper validation of bNumConfigurations before using it to access the config array, preventing buffer overflow conditions from malformed USB device descriptors.