Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.188

Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet.

Recommendations For Linux Kernel versions 3.16 through 5.4.188, update to version v5.4.189 or later to resolve the issue.