PT-2018-2845 · Linux · Linux Kernel
Publicado
2018-12-03
·
Atualizado
2018-12-03
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a null pointer dereference in the lola interrupt handler of the sound/pci/lola/snd-lola.ko module. This can be exploited to cause a denial of service when a Digigram Lola device, which appears as a PCI-e device, is connected. The problem arises from the
lola update rirb function, called from the lola interrupt handler, where a null pointer chip->rirb.buf is dereferenced. The lola interrupt handler is registered in lola create, which is called from lola probe, while the memory for chip->rirb.buf is allocated using snd dma alloc pages in setup corb rirb, after the interrupt handler registration in lola create.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel