CVE-2024-44954
Published: Sep 4, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below (so put as reported-by here). This patch protects the midibuf call of the former code path with a spinlock for avoiding the possible races.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 705ececd1c60d0f5d6ef2a719008847883516970 - < 643293b68fbb6c03f5e907736498da17d43f0d81affected 705ececd1c60d0f5d6ef2a719008847883516970 - < 40f3d5cb0e0cbf7fa697913a27d5d361373bdcf5affected 705ececd1c60d0f5d6ef2a719008847883516970 - < e7e7d2b180d8f297cea6db43ea72402fd33e1a29affected 705ececd1c60d0f5d6ef2a719008847883516970 - < a54da4b787dcac60b598da69c9c0072812b8282daffected 705ececd1c60d0f5d6ef2a719008847883516970 - < c80f454a805443c274394b1db0d1ebf477abd94e+3 more versions |
Linux | Linux | affected 2.6.30unaffected 0 - < 2.6.30unaffected 4.19.320 - <= 4.19.*unaffected 5.4.282 - <= 5.4.*unaffected 5.10.224 - <= 5.10.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now