In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq: oss: Fix races at processing SysEx messages
OSS sequencer handles the SysEx messages split in 6 bytes packets, and ALSA sequencer OSS layer tries to combine those. It stores the data in the internal buffer and this access is racy as of now, which may lead to the out-of-bounds access.
As a temporary band-aid fix, introduce a mutex for serializing the process of the SysEx message packets.
[
{
"id": "CVE-2024-57893-07d3b25a",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "snd_seq_oss_synth_sysex",
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0179488ca992d79908b8e26b9213f1554fc5bacc",
"digest": {
"length": 985.0,
"function_hash": "47486810719418815736013171414509816642"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-57893-1137845e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "snd_seq_oss_synth_sysex",
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d382112b36382aa65aad765f189ebde9926c101",
"digest": {
"length": 985.0,
"function_hash": "47486810719418815736013171414509816642"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-57893-1d58c17d",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d382112b36382aa65aad765f189ebde9926c101",
"digest": {
"line_hashes": [
"172668650426814091290422611665002785201",
"330142076647130533581180314365541969671",
"100878797363846774575759462336314368841",
"321621063506536557994085431718660825816",
"39529990339560250862347396981271997",
"279826002001374342519081767843137532058",
"109413473762598668737320110123751069992"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-57893-640d1199",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cff1de87ed14fc0f2332213d2367100e7ad0753a",
"digest": {
"line_hashes": [
"172668650426814091290422611665002785201",
"330142076647130533581180314365541969671",
"100878797363846774575759462336314368841",
"321621063506536557994085431718660825816",
"39529990339560250862347396981271997",
"279826002001374342519081767843137532058",
"109413473762598668737320110123751069992"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-57893-c7f2ab13",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "snd_seq_oss_synth_sysex",
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2392b79d8af3714ea8878b71c66dc49d3110f44",
"digest": {
"length": 985.0,
"function_hash": "47486810719418815736013171414509816642"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-57893-e1afd5cf",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2392b79d8af3714ea8878b71c66dc49d3110f44",
"digest": {
"line_hashes": [
"172668650426814091290422611665002785201",
"330142076647130533581180314365541969671",
"100878797363846774575759462336314368841",
"321621063506536557994085431718660825816",
"39529990339560250862347396981271997",
"279826002001374342519081767843137532058",
"109413473762598668737320110123751069992"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-57893-e64949ab",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0179488ca992d79908b8e26b9213f1554fc5bacc",
"digest": {
"line_hashes": [
"172668650426814091290422611665002785201",
"330142076647130533581180314365541969671",
"100878797363846774575759462336314368841",
"321621063506536557994085431718660825816",
"39529990339560250862347396981271997",
"279826002001374342519081767843137532058",
"109413473762598668737320110123751069992"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-57893-ea8535cf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "snd_seq_oss_synth_sysex",
"file": "sound/core/seq/oss/seq_oss_synth.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cff1de87ed14fc0f2332213d2367100e7ad0753a",
"digest": {
"length": 985.0,
"function_hash": "47486810719418815736013171414509816642"
},
"signature_type": "Function"
}
]