Red Hat Bugzilla – Bug 113305
CAN-2003-0700 CMedia additional get_user issues
Last modified: 2013-03-06 00:56:41 EST
CAN-2003-0700 The C-Media PCI sound driver in Linux before 2.4.22 does
not use the get_user function to access userspace, which crosses
security boundaries and may facilitate the exploitation of
vulnerabilities (not the same as CAN-2003-0699)
[hence fixed in 2.4.22]
This was fixed in ipf in RHSA-2003:368 but doesn't appear to have been
fixed for x86 (EL2.1 AS/WS/ES i386)
An errata has been issued which should help the problem described in this bug report.
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen
this bug report if the solution does not work for you.