Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below (so put as reported-by here). This patch protects the midibuf call of the former code path with a spinlock for avoiding the possible races.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
705ececd1c60d0f5d6ef2a719008847883516970 to < 643293b68fbb6c03f5e907736498da17d43f0d81affected705ececd1c60d0f5d6ef2a719008847883516970 to < 40f3d5cb0e0cbf7fa697913a27d5d361373bdcf5affected705ececd1c60d0f5d6ef2a719008847883516970 to < e7e7d2b180d8f297cea6db43ea72402fd33e1a29affected705ececd1c60d0f5d6ef2a719008847883516970 to < a54da4b787dcac60b598da69c9c0072812b8282daffected705ececd1c60d0f5d6ef2a719008847883516970 to < c80f454a805443c274394b1db0d1ebf477abd94eaffected705ececd1c60d0f5d6ef2a719008847883516970 to < 535df7f896a568a8a1564114eaea49d002cb1747affected705ececd1c60d0f5d6ef2a719008847883516970 to < 51d87f11dd199bbc6a85982b088ff27bde53b48aaffected705ececd1c60d0f5d6ef2a719008847883516970 to < 15b7a03205b31bc5623378c190d22b7ff60026f1affected
Linux Linux
Default version status: affected
2.6.30affected0 to < 2.6.30unaffected4.19.320 to ≤ 4.19.*unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.105 to ≤ 6.1.*unaffected6.6.46 to ≤ 6.6.*unaffected6.10.5 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/643293b68fbb6c03f5e907736498da17d43f0d81 ↗
- https://git.kernel.org/stable/c/40f3d5cb0e0cbf7fa697913a27d5d361373bdcf5 ↗
- https://git.kernel.org/stable/c/e7e7d2b180d8f297cea6db43ea72402fd33e1a29 ↗
- https://git.kernel.org/stable/c/a54da4b787dcac60b598da69c9c0072812b8282d ↗
- https://git.kernel.org/stable/c/c80f454a805443c274394b1db0d1ebf477abd94e ↗
- https://git.kernel.org/stable/c/535df7f896a568a8a1564114eaea49d002cb1747 ↗
- https://git.kernel.org/stable/c/51d87f11dd199bbc6a85982b088ff27bde53b48a ↗
- https://git.kernel.org/stable/c/15b7a03205b31bc5623378c190d22b7ff60026f1 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗