PT-2018-1071 · Linux+5 · Linux Kernel+5
Published
2018-01-11
·
Updated
2024-06-15
·
CVE-2018-1000004
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6 through 4.12
Description
A race condition issue exists in the sound system of the Linux kernel, potentially leading to a deadlock and denial of service condition. The vulnerability is related to the
snd seq write and snd seq ioctl set client pool functions in the sound subsystem, which can cause errors due to multithreading issues. This can be exploited by a remote attacker to cause a denial of service.Recommendations
For Linux kernel versions 2.6 through 4.12, consider disabling the sound system or restricting access to the vulnerable functions
snd seq write and snd seq ioctl set client pool to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu