---------------------------------------------------------------------- Public Beta of CSI and WSUS Integration http://secunia.com/blog/74 ---------------------------------------------------------------------- TITLE: Linux Kernel hda-intel Driver "azx_position_ok()" Denial of Service SECUNIA ADVISORY ID: SA38718 VERIFY ADVISORY: http://secunia.com/advisories/38718/ DESCRIPTION: A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service). The vulnerability is caused due to a division by zero within the "azx_position_ok()" function in sound/pci/hda/hda_intel.c, which can be exploited to crash the system. Note: Successful exploitation may require that the hda-intel driver is used. The vulnerability is reported in version 2.6.32.7 and 2.6.33-rc6 on a system using the AMD780V chipset. Other versions may also be affected. SOLUTION: Fixed in the GIT repository. http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fed08d036f2aabd8d0c684439de37f8ebec2bbc2 PROVIDED AND/OR DISCOVERED BY: Jody Bruchon ORIGINAL ADVISORY: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fed08d036f2aabd8d0c684439de37f8ebec2bbc2 http://nctritech.net/bugreport.txt ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------