Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.19.237

Description The issue is related to an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven.

Recommendations For Linux Kernel versions 3.16 through 4.19.237, update to version v4.19.238 or later to resolve the issue.