snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2020-04-12T21:25:53
Updated: 2024-08-04T11:41:58.160Z
Reserved: 2020-04-12T00:00:00
Link: CVE-2020-11725

No data.

Status : Modified
Published: 2020-04-12T22:15:11.900
Modified: 2024-11-21T04:58:29.453
Link: CVE-2020-11725
