Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-47509

ALSA: pcm: oss: Limit the period size to 16MB

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Limit the period size to 16MB Set the practical limit to the period size (the fragment shift in OSS) instead of a full 31bit; a too large value could lead to the exhaust of memory as we allocate temporary buffers of the period size, too. As of this patch, we set to 16MB limit, which should cover all use cases.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d1bb703ad050de9095f10b2d3416c32921ac6bccaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b02a41eebcc36d4f07196780f2e165ca2c499257affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < be55f306396cd62c6889286a7194fd8b53363aebaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2e54cf6794bf82a54aaefc78da13819aea9cd28aaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 76f19e4cbb548e28547f8c328aa0bfb3a10222d3affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ad45babf7886e7a212ee1d5eda9ef49f696db43caffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 35a3e511032146941085f87dd9fb5b82ea5c00a2affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8839c8c0f77ab8fc0463f4ab8b37fca3f70677c2affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.4.295 to ≤ 4.4.*unaffected
  • 4.9.293 to ≤ 4.9.*unaffected
  • 4.14.258 to ≤ 4.14.*unaffected
  • 4.19.221 to ≤ 4.19.*unaffected
  • 5.4.165 to ≤ 5.4.*unaffected
  • 5.10.85 to ≤ 5.10.*unaffected
  • 5.15.8 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References