CVE-2017-1000380

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same ti...

PT-2017-3262

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.5 Description The issue is related to a data race in the ALSA /dev/snd/timer driver of the Linux kernel, which can lead to the disclosure of information. This can occur when a read and an ioctl happen...

PT-2016-6029

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 Description The issue is related to the snd timer user params function in the sound/core/timer.c file of the Linux kernel. This function does not properly initialize a certain data structure, allowing local...

PT-2016-6035

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 Description The issue allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface. This is related to the snd timer user ccallback and snd timer use...

DEBIAN-CVE-2016-2545

The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service race condition and system crash via a crafted ioctl call...

UBUNTU-CVE-2016-2545

The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service race condition and system crash via a crafted ioctl call...

PT-2016-5197

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue is related to the snd timer interrupt function in sound/core/timer.c, which does not properly maintain a certain linked list. This allows local users to cause a denial of service,...

PT-2016-5200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service, resulting in a system crash, via a crafted ioctl call. This is related to the snd timer close and snd timer stop functions in the...