Linux Kernel "sound/oss/midi_synth.c" Memory Corruption Vulnerability

Linux Kernel "sound/oss/midi_synth.c" Memory Corruption Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47007

Linux Kernel is the Kernel used by open source Linux.

Linux Kernel "sound/oss/midi_synth.c" has a memory corruption vulnerability. Local attackers can exploit this vulnerability to cause memory corruption. In non-x86 architectures, attackers can run arbitrary code, cause a denial of service. This vulnerability also affects the OSS subsystem.

The offset passed to midi_synth_load_patch () can be arbitrary. If it is greater than the header value, copy_from_user (dst, src, negative_val) will be generated ). On x86, this returns-EFAULT, which can cause memory corruption in other architectures. In addition, the length field of the sysex_info architecture may not be initialized before use. Finally, comparing signatures can lead to an unexpected loop.

<* Source: Dan Rosenberg (drosenberg@vsecurity.com)

Link: http://marc.info /? I = linux-kernel & m = 130089204124354 & w = 2
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.kernel.org/