Lucene search

K
osvGoogleOSV:CVE-2024-42097
HistoryJul 29, 2024 - 6:15 p.m.

CVE-2024-42097

2024-07-2918:15:12
Google
osv.dev
3
linux kernel
alsa
emux
patch
ioctl
data validation

AI Score

8.3

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

ALSA: emux: improve patch ioctl data validation

In load_data(), make the validation of and skipping over the main info
block match that in load_guspatch().

In load_guspatch(), add checking that the specified patch length matches
the actually supplied data, like load_data() already did.