Back to bug 1311554

Who When What Removed Added
Andrej Nemec 2016-02-24 13:03:48 UTC Summary CVE-2016-2543 kernel: sound: NULL dereference via ALSA sequencer access CVE-2016-2543 kernel: sound: GPF in snd_seq_fifo_clear
Andrej Nemec 2016-02-24 13:41:19 UTC Depends On 1311573
Andrej Nemec 2016-02-24 13:42:52 UTC Blocks 1311575
Andrej Nemec 2016-02-24 13:57:59 UTC Whiteboard impact=moderate,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=new,rhel-6/kernel=new,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=new,rhelsa-7/arm-kernel=new,fedora-all/kernel=affected impact=moderate,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=new,rhel-6/kernel=new,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=new,rhelsa-7/arm-kernel=new,fedora-all/kernel=notaffected
Vladis Dronov 2016-03-04 07:44:13 UTC CC vdronov
Vladis Dronov 2016-03-04 12:28:47 UTC Doc Text snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear() unconditionally even if there is no FIFO assigned, and this leads to an Oops due to NULL dereference.
Whiteboard impact=moderate,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=new,rhel-6/kernel=new,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=new,rhelsa-7/arm-kernel=new,fedora-all/kernel=notaffected impact=moderate,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected
Vladis Dronov 2016-03-04 12:29:31 UTC Whiteboard impact=moderate,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected impact=low,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected
Vladis Dronov 2016-03-04 12:29:48 UTC Severity medium low
Vladis Dronov 2016-03-04 12:30:04 UTC Priority medium low
Vladis Dronov 2016-03-04 12:48:34 UTC Status NEW CLOSED
Resolution --- WONTFIX
Last Closed 2016-03-04 07:48:34 UTC
Vladis Dronov 2016-03-07 13:00:46 UTC Whiteboard impact=low,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected impact=low,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=wontfix,rhel-6/kernel=wontfix,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected
Martin Prpič 2016-03-15 11:33:43 UTC Doc Text snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear() unconditionally even if there is no FIFO assigned, and this leads to an Oops due to NULL dereference.
Product Security DevOps Team 2019-09-29 13:44:17 UTC Whiteboard impact=low,public=20160119,reported=20160119,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-476,rhel-5/kernel=wontfix,rhel-6/kernel=wontfix,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=notaffected

Back to bug 1311554