Re: [PATCH v3] ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

[Takashi Iwai <tiwai@xxxxxxx>]

On Wed, 20 Nov 2024 13:41:44 +0100,
Benoît Sevens wrote:
> 
> A bogus device can provide a bNumConfigurations value that exceeds the
> initial value used in usb_get_configuration for allocating dev->config.
> 
> This can lead to out-of-bounds accesses later, e.g. in
> usb_destroy_configuration.
> 
> Signed-off-by: Benoît Sevens <bsevens@xxxxxxxxxx>
> Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
> Cc: stable@xxxxxxxxxx

Thanks, applied now.


Takashi