Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +3 more
- >= 6.1.21-1-lts, < 6.1.21-1-lts-D1
A vulnerability in the Linux kernel's ALSA ymfpci driver has been addressed. The issue arose because the snd_dma_buffer.bytes field now reflects the aligned size, a change that the snd_BUG_ON() macro did not consider. This oversight led to a warning during the driver's probe function, indicating a potential problem with how the driver was handling memory allocations.
The vulnerability could cause a false positive warning during the driver's initialization process, suggesting a memory management issue that could be misinterpreted as a critical error.
The vulnerability can be reproduced by loading the ALSA ymfpci driver on a system with a compatible sound card. The driver will issue a WARNING message related to the snd_BUG_ON() check, indicating that the probe function has encountered an unexpected condition. This warning can be seen in the system logs shortly after the driver is loaded.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the kernel can be found in the official Linux documentation or through the package management system of the Linux distribution in use.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.