[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2020-11725 -- linux-image

ID: oval:org.secpod.oval:def:2003227Date: (C)2020-09-23   (M)2024-05-16
Class: VULNERABILITYFamily: unix




** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.

Platform:
Debian 10.x
Debian 9.x
Product:
linux-image-4.9
linux-image-4.19
Reference:
CVE-2020-11725
CVE    1
CVE-2020-11725

© SecPod Technologies