Out-of-bounds read in Linux kernel - CVE-2017-9985

Vulnerability identifier: #VU92429

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-9985

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to out-of-bounds read error within the snd_msnd_interrupt() function in sound/isa/msnd/msnd_pinnacle.c, within the snd_msndmidi_input_read() function in sound/isa/msnd/msnd_midi.c. A local user can execute arbitrary code.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gke (Ubuntu package)
linux-snapdragon (Ubuntu package)

Install update from vendor's repository.

linux (Ubuntu package) - update to 4.4.0-98.121
linux-kvm (Ubuntu package) - update to 4.4.0-1009.14
linux-aws (Ubuntu package) - update to 4.4.0-1039.48
linux-gke (Ubuntu package) - update to 4.4.0-1033.33
linux-snapdragon (Ubuntu package) - update to 4.4.0-1078.83

• https://bugzilla.kernel.org/show_bug.cgi?id=196133
• http://www.securityfocus.com/bid/99335
• https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021
• https://usn.ubuntu.com/3754-1/

• Out-of-bounds read in Linux kernel isa msnd
• Ubuntu update for linux, linux-aws, linux-gke and more