CVE-2014-9904
Fixed in a distro release EPSS <1%
The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
Products: linux_kernel, debian_linux, novell suse_linux_enterprise_real_time_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.0.2-1 |
| Debian 13 | linux | 4.0.2-1 |
| Debian 14 | linux | 4.0.2-1 |
| Debian 8 | linux | 3.16.7-ckt25-2+deb8u3 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-default | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-source | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-syms | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-xen | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12-SP1_Update_7 | 1-4.2 |
| SUSE Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-source-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-syms-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-default | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-source | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-syms | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-xen | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server 12-LTSS | kernel-default | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server 12-LTSS | kernel-source | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server 12-LTSS | kernel-syms | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server 12-LTSS | kernel-xen | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server 12-LTSS | kgraft-patch-SLE12_Update_19 | 1-2.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-default | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-source | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-syms | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-xen | 3.12.61-52.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kgraft-patch-SLE12_Update_19 | 1-2.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-default | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-source | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-syms | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-xen | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | kernel-docs | 3.12.62-60.62.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | kernel-obs-build | 3.12.62-60.62.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | kernel-default | 3.12.62-60.62.1 |
| Ubuntu 14.04 LTS | linux | 3.13.0-101.148 |