Threats tagged 'ghsa-vp4m-4hj6-cc9p'

A vulnerability in the Linux kernel ALSA us122l driver allowed processes with read-only mappings to later upgrade those mappings to writable, potentially enabling unauthorized memory access and corruption. This was due to the hwdep mmap callback leaving VM_MAYWRITE set on read-only mappings, allowing mprotect() to make them writable. The flaw could lead to out-of-bounds memory access and improper page freeing. The issue has been resolved by clearing VM_MAYWRITE on read-buffer mappings after rejecting initially writable VMAs.