Description: sound: a race condition in the kernel sound timer in snd_timer_user_read() References: https://source.android.com/security/bulletin/pixel/2017-12-01#kernel-components https://bugzilla.redhat.com/show_bug.cgi?id=1568821 Notes: Bugs: upstream: released (4.5-rc1) [c3b1681375dc6e71d89a3ae00cc3ce9e775a8917], (4.5-rc4) [4dff5c7b7093b19c19d3a100f8a3ad87cb7cd9e7] 4.19-upstream-stable: N/A "Fixed before branching point" 4.9-upstream-stable: N/A "Fixed before branching point" 3.16-upstream-stable: released (3.16.35) [a293ce87a6c53a070309f150abeffe9823a05c88, d2fe56f9b3f8bace0b645d6c6634eba854b6b7f0] sid: released (4.4.2-1) 4.9-stretch-security: N/A "Fixed before branching point" 3.16-jessie-security: released (3.16.7-ckt25-1)