Threats tagged 'ghsa-7vq8-4frp-4vcv'

CVE-2024-53150 is a high-severity vulnerability in the Linux kernel's ALSA USB-audio driver. It involves out-of-bounds reads caused by insufficient validation of descriptor lengths when traversing clock source descriptors. The flaw can lead to memory access beyond intended bounds if a device provides malformed descriptors with shorter lengths. The issue has been fixed by adding sanity checks to validate descriptor lengths before processing them.