Skip to content
Commit 82e68f7f authored by Willy Tarreau's avatar Willy Tarreau Committed by Linus Torvalds
Browse files

sound: ensure device number is valid in snd_seq_oss_synth_make_info



snd_seq_oss_synth_make_info() incorrectly reports information
to userspace without first checking for the validity of the
device number, leading to possible information leak (CVE-2008-3272).

Reported-By: default avatarTobias Klein <tk@trapkit.de>
Acked-and-tested-by: default avatarTakashi Iwai <tiwai@suse.de>
Cc: stable@kernel.org
Signed-off-by: default avatarWilly Tarreau <w@1wt.eu>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent 82248a5e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment