Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol ops rather individually, and pending calls might be not always caught at disconnecting the device. For avoiding the potential UAF scenarios, add sanity checks of the card disconnection at each entry point of OSS mixer accesses. The rwsem is taken just before that check, hence the rest context should be covered by that properly.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 11ecfba92bdb420456a48da45a756b24d6356f72affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 20c52a70414095447da1be076f492cc7a6dce7cfaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ae583f113d15fa97e5234133c20d09f8e6214e47affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e6645e625480cdf1079a4265f758d13b70721029affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8c097cf736993454acf3f711a3b376d6c7ad8965affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 084d5d44418148662365eced3e126ad1a81ee3e2affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/11ecfba92bdb420456a48da45a756b24d6356f72 ↗
- https://git.kernel.org/stable/c/20c52a70414095447da1be076f492cc7a6dce7cf ↗
- https://git.kernel.org/stable/c/ae583f113d15fa97e5234133c20d09f8e6214e47 ↗
- https://git.kernel.org/stable/c/e6645e625480cdf1079a4265f758d13b70721029 ↗
- https://git.kernel.org/stable/c/8c097cf736993454acf3f711a3b376d6c7ad8965 ↗
- https://git.kernel.org/stable/c/084d5d44418148662365eced3e126ad1a81ee3e2 ↗