Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
634ec0b2906efd46f6f57977e172aa3470aca432 to < 16620f0617400746984362c3d6ac547eeae1d35faffected634ec0b2906efd46f6f57977e172aa3470aca432 to < ddd32ec66bc4eb6969fe835e4cc1c0706c6348feaffected634ec0b2906efd46f6f57977e172aa3470aca432 to < 6275fd726d53a8ec724f20201cf3bd862711e17baffected634ec0b2906efd46f6f57977e172aa3470aca432 to < 161291bac551821bba98eb4ea84c82338578d1b0affected634ec0b2906efd46f6f57977e172aa3470aca432 to < cdda0d06f8650e33255f79839f188bbece44117caffected634ec0b2906efd46f6f57977e172aa3470aca432 to < 210d77cca3d0494ed30a5c628b20c1d95fa04fb1affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.63 to ≤ 6.12.*unaffected6.17.13 to ≤ 6.17.*unaffected6.18.2 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/16620f0617400746984362c3d6ac547eeae1d35f ↗
- https://git.kernel.org/stable/c/ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe ↗
- https://git.kernel.org/stable/c/6275fd726d53a8ec724f20201cf3bd862711e17b ↗
- https://git.kernel.org/stable/c/161291bac551821bba98eb4ea84c82338578d1b0 ↗
- https://git.kernel.org/stable/c/cdda0d06f8650e33255f79839f188bbece44117c ↗
- https://git.kernel.org/stable/c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1 ↗