In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()<\/p>\n
The snd_usbmidi_us122l_output() picks a count of 2 on anything slower
\nthan high speed and never relates it to ep->max_transfer. The URB
\nbuffer holds exactly max_transfer bytes, so a device declaring a one
\nbyte bulk endpoint takes two bytes from snd_rawmidi_transmit(), and the
\nmemset that pads the rest computes 1 – 2 in int and wraps to SIZE_MAX.<\/p>\n
Only 0x800e and 0x800f are pinned to nine bytes. The US-122MKII at
\n0x0644:0x8021 falls to the default and takes usb_maxpacket(), which the
\nUSB core only clamps downward.<\/p>\n
The akai and novation output ops in this file were given the same guard
\nrecently. Do the same here.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()<\/p>\n
The snd_usbmidi_us122l_output() picks a count of 2 on anything slowe<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-24721","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/24721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}