![](https://secure.gravatar.com/avatar/a3dd0965b05b71c3dff6eb289eb43e59.jpg?s=120&d=mm&r=g)
20 Oct
2021
20 Oct
'21
8:31 p.m.
On 20. 10. 21 18:48, Takashi Iwai wrote:
The OSS mixer can reassign the mapping slots dynamically via proc file. Although the addition and deletion of those slots are protected by mixer->reg_mutex, the access to slots aren't, hence this may cause UAF when the slots in use are deleted concurrently.
This patch applies the mixer->reg_mutex in all appropriate code paths (i.e. the ioctl functions) that may access slots.
Reviewed-by: Jaroslav Kysela perex@perex.cz
Thanks, Jaroslav
--
Jaroslav Kysela perex@perex.cz
Linux Sound Maintainer; ALSA Project; Red Hat, Inc.