ACK/Cmnt: [SRU OEM-5.17 0/1] CVE-2022-3303

Andrei Gherzan andrei.gherzan at canonical.com
Thu Apr 13 14:52:52 UTC 2023


On 23/04/13 05:17PM, Cengiz Can wrote:
> [Impact]
> It was discovered that the sound subsystem in the Linux kernel contained a race
> condition in some situations. A local attacker could use this to cause a denial
> of service (system crash).
> 
> [Fix]
> Cherry picked from upstream.
> 
> [Test case]
> Compile and boot tested only.
> 
> [Potential regression]
> Low. Changes a call to use a locked version instead. Unlock label already exists
> so very unlikely to cause deadlocks.
> 
> Takashi Iwai (1):
>   ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

The patch looks good and was backported upstream in a good couple
versions too.

> 
>  sound/core/oss/pcm_oss.c | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
> 
> -- 
> 2.37.2

Acked-by: Andrei Gherzan <andrei.gherzan at canonical.com>

-- 
Andrei Gherzan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20230413/4cb1c31b/attachment.sig>


More information about the kernel-team mailing list