CVE-2017-1000380: Infoleak
A information leak was found in /dev/snd/timer driver which was prone to a data race, leading to uninitialized memory from the kernel heap being copied to user space. A local user with access to /dev/snd/timer could use this flaw to read kernel space memory of other users.
References:
http://seclists.org/oss-sec/2017/q2/455
https://bugzilla.suse.com/showbug.cgi?id=1044125
CVE-ID assignment:
http://seclists.org/oss-sec/2017/q2/463
Upstream patches:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ba3021b2c79b2fa9114f92790a99deb27a65b728
Other sources
sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-1000380?
CVE-2017-1000380 is a vulnerability in the Linux kernel before version 4.11.5 that allows local users to read information belonging to other users.
How does CVE-2017-1000380 work?
CVE-2017-1000380 works by exploiting a data race in the ALSA /dev/snd/timer driver, which can lead to the disclosure of uninitialized memory contents.
What is the severity of CVE-2017-1000380?
CVE-2017-1000380 has a severity level of medium.
Is there a fix for CVE-2017-1000380?
Yes, the fix for CVE-2017-1000380 is available in Linux kernel version 4.11.5 and later.
Where can I find more information about CVE-2017-1000380?
You can find more information about CVE-2017-1000380 in the Linux kernel's git repository and the change log for version 4.11.5.