CVE-2017-9985

kernel: Double fetch in the snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c

Loading…

Severity

Low

Red Hat Product Security

4.7

CVSS 3.0

Review impact separately from score.

Published · June 28, 2017

Updated · May 13, 2026

Description

The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 · Use After Free