#VU92903 Out-of-bounds read in Linux kernel
Vulnerability identifier: #VU92903
Vulnerability risk: Low
CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-125
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the snd_soc_put_volsw() function in sound/soc/soc-ops.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel:
External links
http://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d
http://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7
http://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf
http://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7
http://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a
http://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830
http://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d
http://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
