CVE-2026-97930

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf

The in04_last array in struct usx2ydev is declared as char[24], but

in04_buf is allocated as sizeof(struct us428_ctls) which is 21 bytes.

In i_usx2y_in04_int(), when ctl_snapshot_last == -2 (initialization

path):

memcpy(usx2y->in04_last, usx2y->in04_buf, sizeof(usx2y->in04_last));

This copies 24 bytes from a 21-byte slab allocation, reading 3 bytes

past the end of the source object.

Introduce a USX2Y_IN04_SIZE constant defined as sizeof(struct

us428_ctls) and use it consistently for the in04_last array, the

in04_buf allocation, the URB transfer length, and the comparison loop,

replacing the bare 24 and 21 literals throughout.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References