High · published September 4, 2024
In the Linux kernel, the following vulnerability has been resolved:
ALSA: line6: Fix racy access to midibuf
There can be concurrent accesses to line6 midibuf from both the URB
completion callback and the rawmidi API access. This could be a cause
of KMSAN warning triggered by syzkaller below (so put as reported-by
here).
This patch protects the midibuf call of the former code path with a
spinlock for avoiding the possible races.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.320 | 4.19.320 |
| linux/linux_kernel | > 4.20, < 5.4.282 | 5.4.282 |
| linux/linux_kernel | ≥ 5.5, < 5.10.224 | 5.10.224 |
| linux/linux_kernel | > 5.11, < 5.15.165 | 5.15.165 |
| linux/linux_kernel | ≥ 5.16, < 6.1.105 | 6.1.105 |
| linux/linux_kernel | ≥ 6.2, < 6.6.46 | 6.6.46 |
| linux/linux_kernel | ≥ 6.7, < 6.10.5 | 6.10.5 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |