ALSA: firewire-motu: add bounds check in put_user loop for DSP events
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.160, 6.6.120, 6.12.63, 6.17.13, 6.18.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer boundary. Fix by adding a bounds check before put_user().
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in ea2c921d9de6e32ca50cb817b9d57bb881be70de; From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in 6d4f17782ce4facf3197e79707df411ee3d7b30a; From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in 0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f; From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in df692cf2b601a54b34edfdb9e683d67483aa8ce1; From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in 8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187; From 634ec0b2906efd46f6f57977e172aa3470aca432 · fixed in 298e753880b6ea99ac30df34959a7a03b0878eed
- Linux Linux
5.16
- KernelLinux
From 5.16.0 · fixed in 6.1.160; From 6.2.0 · fixed in 6.6.120; From 6.7.0 · fixed in 6.12.63; From 6.13.0 · fixed in 6.17.13; From 6.18.0 · fixed in 6.18.2