ALSA: usb-audio: Validate UAC3 power domain descriptors, too
authorTakashi Iwai <tiwai@suse.de>
Thu, 14 Aug 2025 08:12:42 +0000 (10:12 +0200)
committerTakashi Iwai <tiwai@suse.de>
Thu, 14 Aug 2025 08:13:35 +0000 (10:13 +0200)
commitd832ccbc301fbd9e5a1d691bdcf461cdb514595f
tree85b6750cab69afa1bc2bfbe202aa26cd9efddb0f
parente26ad671172fb1ee4294a10183ad48fd42e94ccc
ALSA: usb-audio: Validate UAC3 power domain descriptors, too

UAC3 power domain descriptors need to be verified with its variable
bLength for avoiding the unexpected OOB accesses by malicious
firmware, too.

Fixes: 9a2fe9b801f5 ("ALSA: usb: initial USB Audio Device Class 3.0 support")
Reported-and-tested-by: Youngjun Lee <yjjuny.lee@samsung.com>
Cc: <stable@vger.kernel.org>
Link: https://patch.msgid.link/20250814081245.8902-1-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/usb/validate.c