Skip to content
OpenAdvisories
Unscored CVE-2011-0712 EUVD-2011-0727GHSA-6cqm-f49r-5r3x

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might…

Published Feb 18, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 5.0 linux-2.6 2.6.26-26lenny4 DSA-2310-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 perf +13 2.6.32-71.29.1.el6 RHSA-2011:0498

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 4.8.13-1.1 openSUSE-SU-2024:10128-1

Advisories 3

References