Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-47511

ALSA: pcm: oss: Fix negative period/buffer sizes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < be8869d388593e57223ad39297c8e54be632f2f2affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 502e1146873d870f87da3b8f93d6bf2de5f38d0caffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8af815ab052eaf74addbbfb556d63ce2137c0e1baffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f96c0959c1ee92adc911c10d6ec209af50105049affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f12c8a7515f641885677960af450082569a87243affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 02b2b691b77cd7b951fa7b6c9d44d4e472cdc823affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 00a860678098fcd9fa8db2b5fb9d2ddf4776d4ccaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9d2479c960875ca1239bcb899f386970c13d9cfeaffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.4.295 to ≤ 4.4.*unaffected
  • 4.9.293 to ≤ 4.9.*unaffected
  • 4.14.258 to ≤ 4.14.*unaffected
  • 4.19.221 to ≤ 4.19.*unaffected
  • 5.4.165 to ≤ 5.4.*unaffected
  • 5.10.85 to ≤ 5.10.*unaffected
  • 5.15.8 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References