Lucene search

K
redhatcveRedhat.comRH:CVE-2024-44954
HistorySep 04, 2024 - 8:45 p.m.

CVE-2024-44954

2024-09-0420:45:22
redhat.com
access.redhat.com
1
cve-2024-44954
linux kernel
alsa
midibuf
vulnerability
resolved
racy access
spinlock
kmsan warning
syzkaller

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

13.7%

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below (so put as reported-by here). This patch protects the midibuf call of the former code path with a spinlock for avoiding the possible races.

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

13.7%