In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The observed behavior was introduced by commit 826b5de90c0b ("ALSA: firewire-lib: fix insufficient PCM rule for period/buffer size"), and it is difficult to show that any of the interval parameters will satisfy the snd_interval_test() condition with data from the amdtp_rate_table[] table. Found by Linux Verification Center (linuxtesting.org) with SVACE.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: firewire-lib: Evitar la división por cero en apply_constraint_to_size() La variable de paso se inicializa a cero. Se cambia en el bucle, pero si no se cambia, permanecerá en cero. Agregue una comprobación de variable antes de la división. El comportamiento observado fue introducido por el commit 826b5de90c0b ("ALSA: firewire-lib: corregir regla PCM insuficiente para tamaño de período/búfer"), y es difícil demostrar que alguno de los parámetros de intervalo satisfará la condición snd_interval_test() con datos de la tabla amdtp_rate_table[]. Encontrado por Linux Verification Center (linuxtesting.org) con SVACE.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-369
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-369
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3703cc640> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340b56200> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340b54f80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d24efc00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340b55f80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340b557c0> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd340b54d40> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd3848e00c0> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd3703811c0> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd340b54e80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* |