PT-2018-2845 · Linux · Linux Kernel
Published
2018-12-03
·
Updated
2018-12-03
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a null pointer dereference in the lola interrupt handler of the sound/pci/lola/snd-lola.ko module. This can be exploited to cause a denial of service when a Digigram Lola device, which appears as a PCI-e device, is connected. The problem arises from the
lola update rirb function, called from the lola interrupt handler, where a null pointer chip->rirb.buf is dereferenced. The lola interrupt handler is registered in lola create, which is called from lola probe, while the memory for chip->rirb.buf is allocated using snd dma alloc pages in setup corb rirb, after the interrupt handler registration in lola create.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel