Threats tagged 'ghsa-qcqv-jmh6-h97c'

A vulnerability in the Linux kernel's ALSA usb-audio caiaq driver was resolved by adding validation for EP1 reply lengths. The issue involved insufficient checks on the length of data read from USB request blocks (URBs), potentially leading to out-of-bounds reads. The fix ensures per-command length checks and rejects short payloads before processing.