Description
The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | fai-kernels | 1.17+etch.22etch2 | DSA-1630-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-22etch2 | DSA-1630-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.5 | DSA-1636-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.22etch2 | DSA-1630-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-92.1.13.el5 | RHSA-2008:0885 |
| RHEL 4 | kernel +10 | 2.6.9-78.0.8.EL | RHSA-2008:0972 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-81.el5rt | RHSA-2008:0857 |
Advisories 5
- RHSA-2008:0885 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0972 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1630-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1636-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2008:0857 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- SUSE-SA:2008:047 vendor-advisory
- DSA-1630 vendor-advisory
- RHSA-2008:0885 vendor-advisory
- USN-637-1 vendor-advisory
- 32190 third-party-advisory
- DSA-1636 vendor-advisory
- oval:org.mitre.oval:def:11182 vdb-entry signature
- RHSA-2008:0972 vendor-advisory
- ADV-2008-2307 vdb-entry
- 31614 third-party-advisory
- 1020636 vdb-entry
- 31881 third-party-advisory
- SUSE-SA:2008:052 vendor-advisory
- 32104 third-party-advisory
- 31551 third-party-advisory
- 30559 vdb-entry
- RHSA-2008:0857 vendor-advisory
- SUSE-SA:2008:048 vendor-advisory
- linux-kernel-seqosssynth-info-disclosure(44225) vdb-entry
- 32103 third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82e68f7ffec3800425f2391c8c86277606860442
- 32023 third-party-advisory
- 32759 third-party-advisory
- MDVSA-2008:220 vendor-advisory
- 31366 third-party-advisory
- 32370 third-party-advisory
- 31836 third-party-advisory
- http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2
- 32799 third-party-advisory
- SUSE-SA:2008:049 vendor-advisory
- SUSE-SR:2008:025 vendor-advisory