It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_i...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Ubuntu:14.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-164.214"}]}]

Ubuntu:14.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1031.34"}]}]

Ubuntu:14.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1036.38~14.04.2"}]}]

Ubuntu:14.04:LTS linux-lts-xenial

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-137.163~14.04.1"}]}]

Ubuntu:16.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-137.163"}]}]

Ubuntu:16.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1069.79"}]}]

Ubuntu:16.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1036.38~16.04.1"}]}]

Ubuntu:16.04:LTS linux-gcp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1026.27~16.04.1"}]}]

Ubuntu:16.04:LTS linux-hwe

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-43.46~16.04.1"}]}]

Ubuntu:16.04:LTS linux-kvm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1035.41"}]}]

Ubuntu:16.04:LTS linux-raspi2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1098.106"}]}]

Ubuntu:16.04:LTS linux-snapdragon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1102.107"}]}]

Ubuntu:Pro:FIPS-updates:16.04:LTS linux-fips

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1008.10"}]}]

Ubuntu:18.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-43.46"}]}]

Ubuntu:18.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1031.33"}]}]

Ubuntu:18.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1036.38"}]}]

Ubuntu:18.04:LTS linux-gcp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1026.27"}]}]

Ubuntu:18.04:LTS linux-kvm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1028.28"}]}]

Ubuntu:18.04:LTS linux-oem

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1030.35"}]}]

Ubuntu:18.04:LTS linux-raspi2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1030.32"}]}]

Ubuntu:20.04:LTS linux-azure-fde