NetSight
IP …
high7.8

CVE-2024-44954

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf f…

Impact

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below (so put as reported-by here). This patch protects the midibuf call of the former code path with a spinlock for avoiding the possible races.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.320
after 4.20 before 5.4.282
from 5.5 before 5.10.224
after 5.11 before 5.15.165
from 5.16 before 6.1.105
from 6.2 before 6.6.46

Weakness classification

CWE-362

References