Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix races at processing SysEx messages OSS sequencer handles the SysEx messages split in 6 bytes packets, and ALSA sequencer OSS layer tries to combine those. It stores the data in the internal buffer and this access is racy as of now, which may lead to the out-of-bounds access. As a temporary band-aid fix, introduce a mutex for serializing the process of the SysEx message packets.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cff1de87ed14fc0f2332213d2367100e7ad0753aaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d2392b79d8af3714ea8878b71c66dc49d3110f44affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9d382112b36382aa65aad765f189ebde9926c101affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0179488ca992d79908b8e26b9213f1554fc5baccaffected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected6.1.124 to ≤ 6.1.*unaffected6.6.70 to ≤ 6.6.*unaffected6.12.9 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cff1de87ed14fc0f2332213d2367100e7ad0753a ↗
- https://git.kernel.org/stable/c/d2392b79d8af3714ea8878b71c66dc49d3110f44 ↗
- https://git.kernel.org/stable/c/9d382112b36382aa65aad765f189ebde9926c101 ↗
- https://git.kernel.org/stable/c/0179488ca992d79908b8e26b9213f1554fc5bacc ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗