mbox series

[SRU,Bionic,0/1] CVE-2022-3303

Message ID 20230524071719.122249-1-cengiz.can@canonical.com
Headers show
Series CVE-2022-3303 | expand

Message

Cengiz Can May 24, 2023, 7:17 a.m. UTC 
[Impact]
It was discovered that the sound subsystem in the Linux kernel contained a race
condition in some situations. A local attacker could use this to cause a denial
of service (system crash).

[Fix]
Cherry picked from linux-5.4.y. Upstream fix does not apply due to error
checking differences.

[Test case]
Compile and boot tested only.

[Potential regression]
Low. Moves an error check a little bit further.

Sasha Levin (1):
  ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

 sound/core/oss/pcm_oss.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

Comments

Andrei Gherzan May 24, 2023, 11:02 a.m. UTC | #1 
On 23/05/24 10:17AM, Cengiz Can wrote:
> [Impact]
> It was discovered that the sound subsystem in the Linux kernel contained a race
> condition in some situations. A local attacker could use this to cause a denial
> of service (system crash).
> 
> [Fix]
> Cherry picked from linux-5.4.y. Upstream fix does not apply due to error
> checking differences.
> 
> [Test case]
> Compile and boot tested only.
> 
> [Potential regression]
> Low. Moves an error check a little bit further.
> 
> Sasha Levin (1):
>   ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
> 
>  sound/core/oss/pcm_oss.c | 5 +++--
>  1 file changed, 3 insertions(+), 2 deletions(-)
> 
> -- 
> 2.39.2

Acked-by: Andrei Gherzan <andrei.gherzan@canonical.com>
Tim Gardner May 24, 2023, 12:37 p.m. UTC | #2 
On 5/24/23 1:17 AM, Cengiz Can wrote:
> [Impact]
> It was discovered that the sound subsystem in the Linux kernel contained a race
> condition in some situations. A local attacker could use this to cause a denial
> of service (system crash).
> 
> [Fix]
> Cherry picked from linux-5.4.y. Upstream fix does not apply due to error
> checking differences.
> 
> [Test case]
> Compile and boot tested only.
> 
> [Potential regression]
> Low. Moves an error check a little bit further.
> 
> Sasha Levin (1):
>    ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
> 
>   sound/core/oss/pcm_oss.c | 5 +++--
>   1 file changed, 3 insertions(+), 2 deletions(-)
> 
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Thadeu Lima de Souza Cascardo July 11, 2023, 3:36 p.m. UTC | #3 
On Wed, 24 May 2023 10:17:19 +0300, Cengiz Can wrote:
> [Impact]
> It was discovered that the sound subsystem in the Linux kernel contained a race
> condition in some situations. A local attacker could use this to cause a denial
> of service (system crash).
> 
> [Fix]
> Cherry picked from linux-5.4.y. Upstream fix does not apply due to error
> checking differences.
> 
> [...]

Applied, thanks!

[1/1] ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
      commit: e4d43d081adb323c87b98b87fe5392c8b995f382

Best regards,