ALSA: usb-audio: Validate UAC3 cluster segment descriptors
authorTakashi Iwai <tiwai@suse.de>
Thu, 14 Aug 2025 08:12:43 +0000 (10:12 +0200)
committerTakashi Iwai <tiwai@suse.de>
Thu, 14 Aug 2025 08:13:45 +0000 (10:13 +0200)
commitecfd41166b72b67d3bdeb88d224ff445f6163869
tree1a880675bb127a698005840bb4b9a43818b22dde
parentd832ccbc301fbd9e5a1d691bdcf461cdb514595f
ALSA: usb-audio: Validate UAC3 cluster segment descriptors

UAC3 class segment descriptors need to be verified whether their sizes
match with the declared lengths and whether they fit with the
allocated buffer sizes, too.  Otherwise malicious firmware may lead to
the unexpected OOB accesses.

Fixes: 11785ef53228 ("ALSA: usb-audio: Initial Power Domain support")
Reported-and-tested-by: Youngjun Lee <yjjuny.lee@samsung.com>
Cc: <stable@vger.kernel.org>
Link: https://patch.msgid.link/20250814081245.8902-2-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/usb/stream.c