Lucene search
F5F5:K01002228HistoryMay 08, 2020 - 12:00 a.m.
K01002228 : Linux kernel vulnerability CVE-2020-11725
2020-05-0800:00:00
my.f5.com
10
Security Advisory Description
DISPUTED snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified “interesting side effects.” NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the “owner” concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way. (CVE-2020-11725)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
cbl_mariner
cbl_mariner
CVE-2020-11725 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
redhatcve
redhatcve
CVE-2020-11725
2020-04-16 17:03:41
nvd
nvd
CVE-2020-11725
2020-04-12 22:15:11
prion
prion
Code injection
2020-04-12 22:15:00
debiancve
debiancve
CVE-2020-11725
2020-04-12 22:15:11
ubuntucve
ubuntucve
CVE-2020-11725
2020-04-12 00:00:00
cve
cve
CVE-2020-11725
2020-04-12 22:15:11
cvelist
cvelist
CVE-2020-11725
2020-04-12 21:25:53
avleonov
avleonov