oss-security - CVE request: kernel: ALSA: hda-intel: Avoid divide by zero crash

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4B81FF29.4020108@kernel.sg>
Date: Mon, 22 Feb 2010 11:51:05 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: ALSA: hda-intel: Avoid divide by zero crash

hda-intel crashes the kernel due to a divide by zero in azx_position_ok.

Using mp3blaster-3.2.5 (latest version) to play MP3 audio, the reporter 
was able to crash the kernel by stopping and restarting playback using 
the "5" key repeatedly. This happens as a normal user, not only as root. 
Kernel backtrace points to azx_position_ok() dividing by zero.

Upstream commit:
http://git.kernel.org/linus/fed08d036f2aabd8d0c684439de37f8ebec2bbc2

References:
http://lkml.org/lkml/2010/2/6/40
http://nctritech.net/bugreport.txt
http://lwn.net/Articles/375417/
https://bugzilla.redhat.com/show_bug.cgi?id=567168

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.