Severity: Unknown
Affected Package: kernel
Summary: Kernel memory disclosure via race in /dev/midistat read handler
The kernel driver for /dev/midistat implements a read(2) handler that is not thread-safe. A multi-threaded program can exploit races in the handler to copy out kernel memory outside the boundaries of midistat's data buffer, allowing a local user to read kernel memory within a large window around the buffer. On 32-bit platforms the race may instead trigger a kernel page fault and panic.
No specific recommendations provided.
Aliases: CVE-2019-5612
Published: August 22, 2019
Last Modified: August 22, 2019