Ubuntu kernel update includes MultiSound driver CVE-2017-9986
A local attacker could crash the system or possibly run code via a Turtle Beach audio driver race.
36
Vulnerability1 · 1 read
CVE-2017-9986
- CVSS 3.0
- 7.8 high
- EPSS
- <1%p30
- Published
- ·
- Modified
Description · NVD
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.