CVE-2023-52692

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()

scarlett2_usb_set_config() calls scarlett2_usb_get() but was not checking the result. Return the error if it fails rather than continuing with an invalid value.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9e15fae6c51a362418f8b3054f1322c54675df94 < 51d5697e1c0380d482c3eab002bfc8d0be177e99affected
LinuxLinux9e15fae6c51a362418f8b3054f1322c54675df94 < be96acd3eaa790d10a5b33e65267f52d02f6ad88affected
LinuxLinux9e15fae6c51a362418f8b3054f1322c54675df94 < 996fde492ad9b9563ee483b363af40d7696a8467affected
LinuxLinux9e15fae6c51a362418f8b3054f1322c54675df94 < 145c5aa51486171025ab47f35cff34bff8d0cea3affected
LinuxLinux9e15fae6c51a362418f8b3054f1322c54675df94 < ca459dfa7d4ed9098fcf13e410963be6ae9b6bf3affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.148 <= 5.15.*unaffected
LinuxLinux6.1.75 <= 6.1.*unaffected
LinuxLinux6.6.14 <= 6.6.*unaffected
LinuxLinux6.7.2 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References