Security tracker / CVE-2020-11725

CVE-2020-11725

improper handling of private_size*count multiplication due to count=info->owner typo

References

• Debian security tracker
• cve.org
• https://twitter.com/yabbadabbadrew/status/1248632267028582400
• https://lore.kernel.org/alsa-devel/s5h4ktmlfpx.wl-tiwai@suse.de/

Notes

 carnil> Comment from above twitter reference: "the count = info->owner
 carnil> does not seem right as owner is supposed to be a pid.". Issue
 carnil> has been disputed to be correct by Takashi Iwai.

Bugs

Status

Branch	Status
upstream	needed
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.6-upstream-stable
6.1-upstream-stable	needed
5.10-upstream-stable	needed
4.9-upstream-stable	ignored "EOL"
3.16-upstream-stable	ignored "EOL"
sid	needed
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	needed
4.9-stretch-security	ignored "EOL"
3.16-jessie-security	ignored "EOL"