Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point. Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 0604e5e5537af099ea2f6dfd892afe5c92db8a80; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 28d8d267af5d73f91d7640cbdb4024703256e36c; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 46f0aed47673e275d682af60ed26dcc28add8eae; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 988ec0cd0a2643c25c1658f7c33de2e15a5a2e31; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before bc1d16d282bca421c6fc31de4b8fd412010f01bd; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 0672215994e2347a9b4f145e2bc1709b1e01cee3; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before faa8c1ed77d0169955b9b3516b714cc5fb512f27; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before e4442410f76d66b9f7e854010bce04853f665324; affected 8fdff6a319e7dac757c558bd283dc4577e68cde7 before 6382da0828995af87aa8b8bef28cc61aceb4aff3 |
| Linux / Linux | affected 3.5; unaffected 0 before 3.5; unaffected 4.9.331 through 4.9.*; unaffected 4.14.296 through 4.14.*; unaffected 4.19.262 through 4.19.*; unaffected 5.4.220 through 5.4.*; unaffected 5.10.150 through 5.10.*; unaffected 5.15.75 through 5.15.*; unaffected 5.19.17 through 5.19.*; unaffected 6.0.3 through 6.0.*; unaffected 6.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/0604e5e5537af099ea2f6dfd892afe5c92db8a80
- https://git.kernel.org/stable/c/28d8d267af5d73f91d7640cbdb4024703256e36c
- https://git.kernel.org/stable/c/46f0aed47673e275d682af60ed26dcc28add8eae
- https://git.kernel.org/stable/c/988ec0cd0a2643c25c1658f7c33de2e15a5a2e31
- https://git.kernel.org/stable/c/bc1d16d282bca421c6fc31de4b8fd412010f01bd
- https://git.kernel.org/stable/c/0672215994e2347a9b4f145e2bc1709b1e01cee3
- https://git.kernel.org/stable/c/faa8c1ed77d0169955b9b3516b714cc5fb512f27
- https://git.kernel.org/stable/c/e4442410f76d66b9f7e854010bce04853f665324
- https://git.kernel.org/stable/c/6382da0828995af87aa8b8bef28cc61aceb4aff3