High severity7.8NVD Advisory· Published Apr 12, 2020· Updated Jun 17, 2026
CVE-2020-11725
CVE-2020-11725
Description
snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Linux/Linux kerneldescription
Patches
Vulnerability mechanics
References
3- github.com/torvalds/linux/blob/3b2549a3740efb8af0150415737067d87e466c5b/sound/core/control.cnvdExploitThird Party Advisory
- twitter.com/yabbadabbadrew/status/1248632267028582400nvdThird Party Advisory
- lore.kernel.org/alsa-devel/s5h4ktmlfpx.wl-tiwai%40suse.de/nvd
News mentions
0No linked articles in our index yet.