Linux Kernel ALSA Sequencer OSS Layer SysEx Message Handling Race Condition Vulnerability

A race condition vulnerability has been identified in the Linux kernel's Advanced Linux Sound Architecture (ALSA) sequencer OSS layer. This issue arises when the OSS sequencer processes SysEx messages that are divided into 6-byte packets. The OSS layer attempts to reassemble these packets, but the current implementation allows for concurrent access to the internal buffer, leading to potential out-of-bounds memory access. To address this issue, a mutex has been introduced to serialize the processing of SysEx message packets.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing memory corruption or allowing for arbitrary code execution.