Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAG_fn=UmeU0K9HRVz1mrkxsTejVHMMG3fwrxWdcwMCpTrR8hYw@mail.gmail.com>
Date: Tue, 20 Jun 2017 17:35:00 +0200
From: Alexander Potapenko <glider@...gle.com>
To: oss-security@...ts.openwall.com
Subject: Re: Linux kernel 2.6.0 to 4.12-rc4 infoleak due to a
 data race in ALSA timer

On Tue, Jun 13, 2017 at 5:18 PM, Adam Maris <amaris@...hat.com> wrote:
>
>> > https://github.com/torvalds/linux/commit/d11662f4f798b50d8c8743f43384
> 2c3e40fe3378
>> > https://github.com/torvalds/linux/commit/ba3021b2c79b2fa9114f92790a99
> deb27a65b728
>>
>>
>
> For reference, CVE-2017-1000380 was assigned for this issue.
>
> Regards,
>
> --
> Adam Mariš, Red Hat Product Security
> 1CCD 3446 0529 81E3 86AF  2D4C 4869 76E7 BEF0 6BC2

Please find the PoC exploit attached.


-- 
Alexander Potapenko
Software Engineer

Google Germany GmbH
Erika-Mann-Straße, 33
80636 München

Geschäftsführer: Matthew Scott Sucherman, Paul Terence Manicle
Registergericht und -nummer: Hamburg, HRB 86891
Sitz der Gesellschaft: Hamburg

View attachment "snd_timer.c" of type "text/x-csrc" (7623 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.