Linux Kernel ALSA OSS PCM Buffer Allocation Overflow Vulnerability

A vulnerability in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Open Sound System (OSS) layer has been identified, related to improper buffer allocation for Pulse Code Modulation (PCM) data. This issue arises when the PCM OSS layer creates a temporary buffer for data conversion, which can unexpectedly exceed the maximum integer value, leading to an overflow. The vulnerability has been addressed by introducing a 1MB upper limit on buffer sizes, ensuring that temporary allocations remain within a manageable range.

Impact

The vulnerability could lead to a buffer allocation overflow, causing the system to attempt to allocate a buffer larger than the maximum integer value, which can result in memory corruption or other unintended behaviors.