CVE-2023-52692

ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()

State: Published
Severity: Not scored
Published: May 17, 2024
Updated: May 11, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()

scarlett2_usb_set_config() calls scarlett2_usb_get() but was not checking the result. Return the error if it fails rather than continuing with an invalid value.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9e15fae6c51a362418f8b3054f1322c54675df94 to before 51d5697e1c0380d482c3eab002bfc8d0be177e99Affected 9e15fae6c51a362418f8b3054f1322c54675df94 to before be96acd3eaa790d10a5b33e65267f52d02f6ad88Affected 9e15fae6c51a362418f8b3054f1322c54675df94 to before 996fde492ad9b9563ee483b363af40d7696a8467Affected 9e15fae6c51a362418f8b3054f1322c54675df94 to before 145c5aa51486171025ab47f35cff34bff8d0cea3Affected 9e15fae6c51a362418f8b3054f1322c54675df94 to before ca459dfa7d4ed9098fcf13e410963be6ae9b6bf3Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

9e15fae6c51a362418f8b3054f1322c54675df94 to before 51d5697e1c0380d482c3eab002bfc8d0be177e99Affected
9e15fae6c51a362418f8b3054f1322c54675df94 to before be96acd3eaa790d10a5b33e65267f52d02f6ad88Affected
9e15fae6c51a362418f8b3054f1322c54675df94 to before 996fde492ad9b9563ee483b363af40d7696a8467Affected
9e15fae6c51a362418f8b3054f1322c54675df94 to before 145c5aa51486171025ab47f35cff34bff8d0cea3Affected
9e15fae6c51a362418f8b3054f1322c54675df94 to before ca459dfa7d4ed9098fcf13e410963be6ae9b6bf3Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.