CVE-2011-1169: Out-of-bounds Read
Array index error in the asihpihpiioctl function in sound/pci/asihpi ...
Other sources
Description of the problem: The user-supplied index into the adapters array needs to be checked, or an out-of-bounds kernel pointer could be accessed and used, leading to potentially exploitable memory corruption.
Reference: http://seclists.org/oss-sec/2011/q1/540
Upstream commit: http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git;a=commit;h=4a122c10fbfe9020df469f0f669da129c5757671
Acknowledgements: Red Hat would like to thank Dan Rosenberg for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1169?
CVE-2011-1169 is classified as a medium severity vulnerability due to its potential to cause memory corruption.
How do I fix CVE-2011-1169?
To fix CVE-2011-1169, update to the Linux kernel version 2.6.38.1 or later.
What type of vulnerability is CVE-2011-1169?
CVE-2011-1169 is an array index error vulnerability found in the AudioScience HPI driver.
Who is affected by CVE-2011-1169?
Local users with access to systems running Linux kernel versions prior to 2.6.38.1 are affected by CVE-2011-1169.
What can exploit CVE-2011-1169?
An attacker can exploit CVE-2011-1169 by providing a crafted adapter index value to the asihpi_hpi_ioctl function.