Linux Kernel ALSA Firewire-lib Uninitialized Flag Vulnerability in AV/C Deferred Transaction

A vulnerability in the Linux kernel's ALSA firewire-lib component has been addressed. The issue involved an uninitialized flag for AV/C deferred transactions, which could lead to undefined behavior. The vulnerability was identified by Undefined Behavior Sanitizer (UBSAN) as an invalid load of a boolean value. This problem arose because the 'deferrable' flag could remain uninitialized for non-control/notify AV/C transactions, potentially causing issues with AV/C responses that use INTERIM status, although such responses are not applicable to the affected transactions.

Impact

Exploitation of this vulnerability could lead to undefined behavior in the kernel, as indicated by the UBSAN report of an invalid load operation.