CVE-2025-68783

ALSA: usb-mixer: us16x08: validate meter packet indices

State: Published
Severity: Not scored
Published: Jan 13, 2026
Updated: May 11, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-mixer: us16x08: validate meter packet indices

get_meter_levels_from_urb() parses the 64-byte meter packets sent by the device and fills the per-channel arrays meter_level[], comp_level[] and master_level[] in struct snd_us16x08_meter_store.

Currently the function derives the channel index directly from the meter packet (MUB2(meter_urb, s) - 1) and uses it to index those arrays without validating the range. If the packet contains a negative or out-of-range channel number, the driver may write past the end of these arrays.

Introduce a local channel variable and validate it before updating the arrays. We reject negative indices, limit meter_level[] and comp_level[] to SND_US16X08_MAX_CHANNELS, and guard master_level[] updates with ARRAY_SIZE(master_level).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 53461710a95e15ac1f6542450943a492ecf8e550Affected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 2168866396bd28ec4f3c8da0fbc7d08b5bd4f053Affected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before cde47f4ccad6751ac36b7471572ddf38ee91870cAffected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 2f21a7cbaaa93926f5be15bc095b9c57c35748d9Affected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before a8ad320efb663be30b794e3dd3e829301c0d0ed3Affected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before eaa95228b8a56c4880a182c0350d67922b22408fAffected d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 5526c1c6ba1d0913c7dfcbbd6fe1744ea7c55f1eAffected
LinuxLinux	4.11Affected before 4.11Not affected 5.10.248 through 5.10.Not affected 5.15.198 through 5.15.Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 53461710a95e15ac1f6542450943a492ecf8e550Affected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 2168866396bd28ec4f3c8da0fbc7d08b5bd4f053Affected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before cde47f4ccad6751ac36b7471572ddf38ee91870cAffected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 2f21a7cbaaa93926f5be15bc095b9c57c35748d9Affected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before a8ad320efb663be30b794e3dd3e829301c0d0ed3Affected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before eaa95228b8a56c4880a182c0350d67922b22408fAffected
d2bb390a2081a36ffe906724d2848d846f2aeb29 to before 5526c1c6ba1d0913c7dfcbbd6fe1744ea7c55f1eAffected

LinuxLinux

4.11Affected
before 4.11Not affected
5.10.248 through 5.10.*Not affected
5.15.198 through 5.15.*Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.18.3 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.