Medium · published November 8, 2024
In the Linux kernel, the following vulnerability has been resolved:
ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
The step variable is initialized to zero. It is changed in the loop,
but if it's not changed it will remain zero. Add a variable check
before the division.
The observed behavior was introduced by commit 826b5de90c0b
("ALSA: firewire-lib: fix insufficient PCM rule for period/buffer size"),
and it is difficult to show that any of the interval parameters will
satisfy the snd_interval_test() condition with data from the
amdtp_rate_table[] table.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.20, < 5.4.285 | 5.4.285 |
| linux/linux_kernel | ≥ 5.5, < 5.10.229 | 5.10.229 |
| linux/linux_kernel | ≥ 5.11, < 5.15.170 | 5.15.170 |
| linux/linux_kernel | ≥ 5.16, < 6.1.115 | 6.1.115 |
| linux/linux_kernel | ≥ 6.2, < 6.6.59 | 6.6.59 |
| linux/linux_kernel | ≥ 6.7, < 6.11.6 | 6.11.6 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |