In the Linux kernel, the following vulnerability has been resolved:
ALSA: emux: improve patch ioctl data validation
In loaddata(), make the validation of and skipping over the main info block match that in loadguspatch().
In loadguspatch(), add checking that the specified patch length matches the actually supplied data, like loaddata() already did.
[
{
"digest": {
"function_hash": "21676649462967221763882874490152635347",
"length": 971.0
},
"id": "CVE-2024-42097-12428a28",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0ff2443fcbb472206d45a5d2a90cc694065804e",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"153736981164833301667234259102620137964",
"176658733210540817953699481132710867701",
"173915163118254849211965954657444137974",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-2a7a6cc6",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0ff2443fcbb472206d45a5d2a90cc694065804e",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "254433213627265442382820011067445589173",
"length": 4424.0
},
"id": "CVE-2024-42097-2e759f4b",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0ff2443fcbb472206d45a5d2a90cc694065804e",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "21676649462967221763882874490152635347",
"length": 971.0
},
"id": "CVE-2024-42097-3d0b0235",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8f5ce3cb9adf0c72e2ad6089aba02d7a32469c2",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"54000776655174322727816825177568369918",
"110370940198310465708958495462904628215",
"33660660478218798101801401154850293355",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-3e990ebc",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d9a000f0220cdaba1682d2a23c0d0c61d620a3",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "116934700244621858663207207323085219465",
"length": 979.0
},
"id": "CVE-2024-42097-4f6a8396",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d9a000f0220cdaba1682d2a23c0d0c61d620a3",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "254433213627265442382820011067445589173",
"length": 4424.0
},
"id": "CVE-2024-42097-5330a45d",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87039b83fb7bfd7d0e0499aaa8e6c049906b4d14",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"153736981164833301667234259102620137964",
"176658733210540817953699481132710867701",
"173915163118254849211965954657444137974",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-5580805e",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89b32ccb12ae67e630c6453d778ec30a592a212f",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"153736981164833301667234259102620137964",
"176658733210540817953699481132710867701",
"173915163118254849211965954657444137974",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-61705fc1",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8f5ce3cb9adf0c72e2ad6089aba02d7a32469c2",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "21676649462967221763882874490152635347",
"length": 971.0
},
"id": "CVE-2024-42097-645db651",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a18293fd8d8519c2f7a03753bc1583b18e3db69",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "230208077356832819964357955152504465861",
"length": 4432.0
},
"id": "CVE-2024-42097-77a5e921",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40d7def67841343c10f8642a41031fecbb248bab",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "230208077356832819964357955152504465861",
"length": 4432.0
},
"id": "CVE-2024-42097-9c2f4b81",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d23982ea9aa438f35a8c8a6305943e98a8db90f6",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "330079138274466849979807304506357089228",
"length": 1181.0
},
"id": "CVE-2024-42097-9ee967d7",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89b32ccb12ae67e630c6453d778ec30a592a212f",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "254433213627265442382820011067445589173",
"length": 4424.0
},
"id": "CVE-2024-42097-a676a721",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8f5ce3cb9adf0c72e2ad6089aba02d7a32469c2",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"54000776655174322727816825177568369918",
"110370940198310465708958495462904628215",
"33660660478218798101801401154850293355",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-afaaabec",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40d7def67841343c10f8642a41031fecbb248bab",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"54000776655174322727816825177568369918",
"110370940198310465708958495462904628215",
"33660660478218798101801401154850293355",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-aff1d513",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d23982ea9aa438f35a8c8a6305943e98a8db90f6",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "143800884845859168645269782277825011382",
"length": 4523.0
},
"id": "CVE-2024-42097-b68a5926",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89b32ccb12ae67e630c6453d778ec30a592a212f",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "254433213627265442382820011067445589173",
"length": 4424.0
},
"id": "CVE-2024-42097-cc77b1ad",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a18293fd8d8519c2f7a03753bc1583b18e3db69",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "116934700244621858663207207323085219465",
"length": 979.0
},
"id": "CVE-2024-42097-e16110e2",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40d7def67841343c10f8642a41031fecbb248bab",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "21676649462967221763882874490152635347",
"length": 971.0
},
"id": "CVE-2024-42097-e8527b22",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87039b83fb7bfd7d0e0499aaa8e6c049906b4d14",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "230208077356832819964357955152504465861",
"length": 4432.0
},
"id": "CVE-2024-42097-f01986b0",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_guspatch"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d9a000f0220cdaba1682d2a23c0d0c61d620a3",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"153736981164833301667234259102620137964",
"176658733210540817953699481132710867701",
"173915163118254849211965954657444137974",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-f516fa73",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a18293fd8d8519c2f7a03753bc1583b18e3db69",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "116934700244621858663207207323085219465",
"length": 979.0
},
"id": "CVE-2024-42097-fd919339",
"target": {
"file": "sound/synth/emux/soundfont.c",
"function": "load_data"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d23982ea9aa438f35a8c8a6305943e98a8db90f6",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"137389109250756475715263821226087970066",
"153736981164833301667234259102620137964",
"176658733210540817953699481132710867701",
"173915163118254849211965954657444137974",
"149370653598314299927602882404492439943",
"188236266998596668453361519584098074084",
"89818186007974060049576826266831775742",
"106371277430126847074698015869973393292",
"183281381869234309759218197072433526012",
"311085608218849065634991533343086934158",
"236251977222997456549591787320257367237",
"327312007079326716920588289786913806242",
"94263550575783106061454341249757736943",
"86150048139292164116596867282472889702",
"55407541201838456277391742769358974427",
"138308581095862286980974467284246945403",
"178973002839762483470286286957508596541",
"120968930514580259669318473777666250968",
"272548963391982461207930274246580110260",
"196286150125340932632610218235505530954"
],
"threshold": 0.9
},
"id": "CVE-2024-42097-fda8e283",
"target": {
"file": "sound/synth/emux/soundfont.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87039b83fb7bfd7d0e0499aaa8e6c049906b4d14",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
}
]