CVE-2023-52674

ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()

State: Published
Severity: 5.5 Medium
Published: May 17, 2024
Updated: May 11, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()

Ensure the value passed to scarlett2_mixer_ctl_put() is between 0 and SCARLETT2_MIXER_MAX_VALUE so we don't attempt to access outside scarlett2_mixer_values[].

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9e4d5c1be21f0c00e747e92186784f3298309b3e to before e517645ead5ea22c69d2a44694baa23fe1ce7c2bAffected 9e4d5c1be21f0c00e747e92186784f3298309b3e to before d8d8897d65061cbe36bf2909057338303a904810Affected 9e4d5c1be21f0c00e747e92186784f3298309b3e to before 03035872e17897ba89866940bbc9cefca601e572Affected 9e4d5c1be21f0c00e747e92186784f3298309b3e to before ad945ea8d47dd4454c271510bea24850119847c2Affected 9e4d5c1be21f0c00e747e92186784f3298309b3e to before 04f8f053252b86c7583895c962d66747ecdc61b7Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

9e4d5c1be21f0c00e747e92186784f3298309b3e to before e517645ead5ea22c69d2a44694baa23fe1ce7c2bAffected
9e4d5c1be21f0c00e747e92186784f3298309b3e to before d8d8897d65061cbe36bf2909057338303a904810Affected
9e4d5c1be21f0c00e747e92186784f3298309b3e to before 03035872e17897ba89866940bbc9cefca601e572Affected
9e4d5c1be21f0c00e747e92186784f3298309b3e to before ad945ea8d47dd4454c271510bea24850119847c2Affected
9e4d5c1be21f0c00e747e92186784f3298309b3e to before 04f8f053252b86c7583895c962d66747ecdc61b7Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.