Fixed
Created: Dec 8, 2025
Updated: Jun 1, 2026
Resolved Date: May 25, 2026
Found In Version: 10.22.33.1
Fix Version: 10.22.33.24
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd[EOL][EOL]In snd_usb_create_streams(), for UAC version 3 devices, the Interface[EOL]Association Descriptor (IAD) is retrieved via usb_ifnum_to_if(). If this[EOL]call fails, a fallback routine attempts to obtain the IAD from the next[EOL]interface and sets a BADD profile. However, snd_usb_mixer_controls_badd()[EOL]assumes that the IAD retrieved from usb_ifnum_to_if() is always valid,[EOL]without performing a NULL check. This can lead to a NULL pointer[EOL]dereference when usb_ifnum_to_if() fails to find the interface descriptor.[EOL][EOL]This patch adds a NULL pointer check after calling usb_ifnum_to_if() in[EOL]snd_usb_mixer_controls_badd() to prevent the dereference.[EOL][EOL]This issue was discovered by syzkaller, which triggered the bug by sending[EOL]a crafted USB device descriptor.
