CVE-2023-52692: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: scarlett2: Add missing error check to scarlett2usbsetconfig()
scarlett2usbsetconfig() calls scarlett2usbget() but was not checking the result. Return the error if it fails rather than continuing with an invalid value.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52692?
The severity of CVE-2023-52692 is currently classified as low due to its specific conditions and limited impact.
How do I fix CVE-2023-52692?
To fix CVE-2023-52692, update your Linux kernel to one of the specified remedied versions, such as 5.10.223-1 or 6.12.11-1.
Which systems are affected by CVE-2023-52692?
CVE-2023-52692 affects Debian systems running the vulnerable versions of the Linux kernel.
What component of the Linux kernel is affected by CVE-2023-52692?
CVE-2023-52692 affects the ALSA subsystem related to the Scarlett 2 USB audio interface.
Is there a known exploit for CVE-2023-52692?
As of now, there is no publicly known exploit for CVE-2023-52692.