Re: [alsa-devel] [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops

From	Takashi Iwai <tiwai@suse.de>
Newsgroups	linux.kernel
Subject	Re: [alsa-devel] [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops
Date	2017-09-12 09:20 +0200
Message-ID	<uoNEd-6FT-5@gated-at.bofh.it> (permalink)
References	<unuaC-VM-31@gated-at.bofh.it> <unvJo-1M9-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, 08 Sep 2017 19:47:32 +0200,
Grygorii Tertychnyi (gtertych) wrote:
> 
> 
> >> Hi Greg,
> >>
> >> Could you please apply it for 4.4-stable.
> >> This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985
> >
> > This vulnerability is just non-issue.  You can't get it working
> > practically; it requires a modified hardware of the decade old ISA
> > sound card, and yet the system has to load / set up the module
> > beforehand.  We should withdraw it from CVE, IMO.
> 
> I think it is worth having it in 4.4, 4.9 and 4.12 also.

... even though the code has never been tested on the real hardware?
That doesn't sound good for stable kernels at all.  That's why I
didn't put Cc to stable in the patch.


Takashi

Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [alsa-devel] [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI    loops Takashi Iwai <tiwai@suse.de> - 2017-09-12 09:20 +0200
  Re: [alsa-devel] [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI  loops "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org> - 2017-09-12 14:40 +0200
    Re: [alsa-devel] [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops Takashi Iwai <tiwai@suse.de> - 2017-09-12 14:40 +0200

csiph-web