Messages in this thread | | | Date | Fri, 08 Sep 2017 18:57:57 +0200 | From | Takashi Iwai <> | Subject | Re: [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops |
| |
On Fri, 08 Sep 2017 18:06:25 +0200, grygorii tertychnyi wrote: > > Hi Greg, > > Could you please apply it for 4.4-stable. > This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985
This vulnerability is just non-issue. You can't get it working practically; it requires a modified hardware of the decade old ISA sound card, and yet the system has to load / set up the module beforehand. We should withdraw it from CVE, IMO.
thanks,
Takashi
> > Takashi Iwai (1): > ALSA: msnd: Optimize / harden DSP and MIDI loops > > sound/isa/msnd/msnd_midi.c | 30 +++++++++++++++--------------- > sound/isa/msnd/msnd_pinnacle.c | 23 ++++++++++++----------- > 2 files changed, 27 insertions(+), 26 deletions(-) > > -- > 2.10.3.dirty >
| |