Skip to content
Snippets Groups Projects
Commit 2dbf7df6 authored by y00230200's avatar y00230200 Committed by Hongliang Yang
Browse files

ALSA: seq: Fix use-after-free at creating a port

CVE-2017-15265

There is a potential race window opened at creating and deleting a
port via ioctl, as spotted by fuzzing.  snd_seq_create_port() creates
a port object and returns its pointer, but it doesn't take the
refcount, thus it can be deleted immediately by another thread.
parent fc750ea7
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment