CVE-2014-4652

Published: 3 July 2014

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

From the Ubuntu Security Team

An information leak was discovered in the control implemenation of the Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory.

Notes

android kernels (goldfish, grouper, maguro, mako and manta) are not
supported on the Ubuntu Touch 13.10 preview kernels
android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4652
• https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92
• https://bugzilla.redhat.com/show_bug.cgi?id=1113406
• http://www.openwall.com/lists/oss-security/2014/06/26/6
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92
• https://ubuntu.com/security/notices/USN-2332-1
• https://ubuntu.com/security/notices/USN-2333-1
• https://ubuntu.com/security/notices/USN-2334-1
• https://ubuntu.com/security/notices/USN-2335-1
• https://ubuntu.com/security/notices/USN-2336-1
• https://ubuntu.com/security/notices/USN-2337-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1339294