In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
[
{
"deprecated": false,
"target": {
"function": "f_midi_set_alt",
"file": "drivers/usb/gadget/function/f_midi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"function_hash": "200538290932037664985657418281410297221",
"length": 992.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2018-20961-3cccab27"
},
{
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_midi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"line_hashes": [
"282712511950880389793146564431219278681",
"283444551387007290227599788363653428280",
"265672214722640940671550366994583635972",
"206033706570530318989141615518152285675"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2018-20961-3f10b544"
},
{
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/u_f.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"line_hashes": [
"220954445337525550758067024956243623157",
"187689207560107407258369467050317550491",
"324506440025450196251007999382362145083",
"204966657309511885764304106706867830839",
"169569546812719019732497056131510285001"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2018-20961-aef35564"
},
{
"deprecated": false,
"target": {
"function": "free_ep_req",
"file": "drivers/usb/gadget/u_f.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"function_hash": "328991408561637639934617258176656947674",
"length": 123.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2018-20961-ddc48bb2"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20961.json"
[
{
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_midi.c"
},
"source": "https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"line_hashes": [
"282712511950880389793146564431219278681",
"283444551387007290227599788363653428280",
"265672214722640940671550366994583635972",
"206033706570530318989141615518152285675"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2018-20961-4450fd5c"
},
{
"deprecated": false,
"target": {
"function": "free_ep_req",
"file": "drivers/usb/gadget/u_f.h"
},
"source": "https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"function_hash": "328991408561637639934617258176656947674",
"length": 123.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2018-20961-a9f41a63"
},
{
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/u_f.h"
},
"source": "https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"line_hashes": [
"220954445337525550758067024956243623157",
"187689207560107407258369467050317550491",
"324506440025450196251007999382362145083",
"204966657309511885764304106706867830839",
"169569546812719019732497056131510285001"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2018-20961-c27b034e"
},
{
"deprecated": false,
"target": {
"function": "f_midi_set_alt",
"file": "drivers/usb/gadget/function/f_midi.c"
},
"source": "https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f",
"digest": {
"function_hash": "200538290932037664985657418281410297221",
"length": 992.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2018-20961-e870f5d0"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20961.json"