ALSA: gus: fix null pointer dereference on pointer block
Summary
GSD-2021-1002228: ALSA: gus: fix null pointer dereference on pointer block. Affects Kernel versions < cb09c760c201f82df83babc92a5ffea0a01807fc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ALSA (Advanced Linux Sound Architecture) is a software framework and part of the Linux kernel that provides an API for sound card device drivers. It allows multiple sound devices to be used simultaneously and provides audio and MIDI functionality to applications. The gus module in ALSA is responsible for supporting the Gravis UltraSound sound card.
The vulnerability in the gus module involves a null pointer dereference on the pointer block. This means that a null pointer is accessed, leading to a crash or potential privilege escalation if exploited. The impact and attack plausibility of this vulnerability have not been proven yet.
Vulnerability Detail
The vulnerability in the gus module of ALSA is caused by a null pointer dereference on the pointer block. When certain conditions are met, a null pointer is accessed, resulting in a crash or potential privilege escalation. The exact technical details and attack vectors are not provided in the vulnerability report.
This vulnerability has been fixed in the Linux Kernel version v4.9.291 by commit cb09c760c201f82df83babc92a5ffea0a01807fc.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ALSA gus module vulnerability involving a null pointer dereference on the pointer block has been identified and fixed in the Linux Kernel version v4.9.291. Users are advised to update their kernel to the fixed version to mitigate the risk of crashes and potential privilege escalation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ALSA (Advanced Linux Sound Architecture) is a software framework and part of the Linux kernel that provides an API for sound card device drivers.
The gus module in ALSA is responsible for supporting the Gravis UltraSound sound card.
A null pointer dereference occurs when a program attempts to access a memory address that is null (has not been assigned a valid value). This can lead to crashes or potential security vulnerabilities.
The impact of this vulnerability includes potential crashes and, if exploited, potential privilege escalation.
To fix this vulnerability, update the Linux Kernel to version v4.9.291 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
