Threats tagged 'ghsa-pr7g-498h-frwf'

CVE-2024-57893 is a race condition vulnerability in the Linux kernel's ALSA OSS sequencer component when processing SysEx messages. The issue arises because the OSS sequencer handles SysEx messages split into 6-byte packets, and the ALSA OSS layer combines these packets using an internal buffer without proper synchronization. This race condition can lead to out-of-bounds memory access. A temporary fix introduces a mutex to serialize processing of these packets.