← CVE Intelligence

CVE-2023-52674

ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() Ensure the value passed to scarlett2_mixer_ctl_put() is between 0 and SCARLETT2_MIXER_MAX_VALUE so we don't attempt to access outside scarlett2_mixer_values[].

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 9e4d5c1be21f0c00e747e92186784f3298309b3e before e517645ead5ea22c69d2a44694baa23fe1ce7c2b; affected 9e4d5c1be21f0c00e747e92186784f3298309b3e before d8d8897d65061cbe36bf2909057338303a904810; affected 9e4d5c1be21f0c00e747e92186784f3298309b3e before 03035872e17897ba89866940bbc9cefca601e572; affected 9e4d5c1be21f0c00e747e92186784f3298309b3e before ad945ea8d47dd4454c271510bea24850119847c2; affected 9e4d5c1be21f0c00e747e92186784f3298309b3e before 04f8f053252b86c7583895c962d66747ecdc61b7
Linux / Linuxaffected 5.4; unaffected 0 before 5.4; unaffected 5.15.148 through 5.15.*; unaffected 6.1.75 through 6.1.*; unaffected 6.6.14 through 6.6.*; unaffected 6.7.2 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.