NetSight
IP …
medium5.5

CVE-2021-47511

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer m…

Impact

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.295
from 4.5 before 4.9.293
from 4.10 before 4.14.258
from 4.15 before 4.19.221
from 4.20 before 5.4.165
from 5.5 before 5.10.85

References