CVE-2022-49772

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the ALSA: usb-audio component. The issue concerns the snd usbmidi output open() function, which contains a check for a NULL port using snd BUG ON(). However, this check can be triggered when a device provides an invalid endpoint setup in its descriptor, causing the driver to skip allocation. The check itself is valid, but the use of snd BUG ON() can be misleading, suggesting a real bug. This was recently detected by syzbot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.