REDHAT-BUG-1550142: Medium severity ALSA ALSA sequencer core vulnerability
ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit() when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access.
References:
http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html
https://marc.info/?l=alsa-devel&m=151859118611846&w=2
An upstream fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1550142?
The severity of REDHAT-BUG-1550142 is considered high due to potential vulnerabilities like use-after-free or out-of-bounds access.
How do I fix REDHAT-BUG-1550142?
To fix REDHAT-BUG-1550142, update the ALSA sequencer core to the latest patch that addresses the issue.
What systems are affected by REDHAT-BUG-1550142?
REDHAT-BUG-1550142 primarily affects systems using the ALSA sequencer core, specifically in Linux environments.
What kind of vulnerabilities can REDHAT-BUG-1550142 lead to?
REDHAT-BUG-1550142 can lead to vulnerabilities such as use-after-free and out-of-bounds access, potentially compromising system security.
When was REDHAT-BUG-1550142 discovered?
REDHAT-BUG-1550142 was reported in February 2018, highlighting a critical issue within the ALSA sequencer core.