Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr->id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b3fe95123f0db79dd0345d249c312823178c11f5 to < 4a3d6c22ca6b6c16e8055fb518aa87f5e043f754affectedb3fe95123f0db79dd0345d249c312823178c11f5 to < d606c703d1e0c54996cb3db76a753157cb2a3c06affectedb3fe95123f0db79dd0345d249c312823178c11f5 to < 3a997371ac2957f11a033a4cec2930042dadb7e3affectedb3fe95123f0db79dd0345d249c312823178c11f5 to < 26a25fb4ef4ba2a33069d489feb75a4c36899ccaaffectedb3fe95123f0db79dd0345d249c312823178c11f5 to < 76b6bc38d0f310c0ae1b2a2ebabe2947d92c601aaffectedb3fe95123f0db79dd0345d249c312823178c11f5 to < cc4215cc2a4b2a9cf8b1952bbe8d5bf925acb3eaaffectedb3fe95123f0db79dd0345d249c312823178c11f5 to < 8adda66edf795d4648f8e26f312e4414c535d25aaffectedb3fe95123f0db79dd0345d249c312823178c11f5 to < f7dcecb92ed192ff5fcf842918fb1aaea84b5bddaffected
Linux Linux
Default version status: affected
2.6.16affected0 to < 2.6.16unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.109 to ≤ 6.12.*unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4a3d6c22ca6b6c16e8055fb518aa87f5e043f754 ↗
- https://git.kernel.org/stable/c/d606c703d1e0c54996cb3db76a753157cb2a3c06 ↗
- https://git.kernel.org/stable/c/3a997371ac2957f11a033a4cec2930042dadb7e3 ↗
- https://git.kernel.org/stable/c/26a25fb4ef4ba2a33069d489feb75a4c36899cca ↗
- https://git.kernel.org/stable/c/76b6bc38d0f310c0ae1b2a2ebabe2947d92c601a ↗
- https://git.kernel.org/stable/c/cc4215cc2a4b2a9cf8b1952bbe8d5bf925acb3ea ↗
- https://git.kernel.org/stable/c/8adda66edf795d4648f8e26f312e4414c535d25a ↗
- https://git.kernel.org/stable/c/f7dcecb92ed192ff5fcf842918fb1aaea84b5bdd ↗