CyberRota Analysis
AI-GeneratedThe vulnerability affects the ALSA subsystem in the Linux kernel, specifically within the us144mkii driver, where a redundant call to usb_anchor_urb() during the completion callback corrupts the anchor list and inflates the URB reference count. This corruption can lead to a use-after-free condition when usb_kill_anchored_urbs() processes the list during stream stop, suspend, or disconnect operations, potentially resulting in system instability or crashes. Linux system administrators and developers using affected versions of the kernel should prioritize applying the patch to mitigate these risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission In capture_urb_complete(), usb_anchor_urb() is called on every completion callback, but the URB is already anchored from the initial submission in tascam_trigger_start(). Each redundant call corrupts the anchor's doubly-linked list and inflates the URB refcount. When usb_kill_anchored_urbs() traverses the list during stream stop / suspend / disconnect, the corrupted list leads to use-after-free. Remove the redundant usb_anchor_urb() from the resubmit path.