CVE-2017-9985: The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allow...

Security readout for executives and security teams

CVE-2017-9985 is a local Linux kernel flaw in an old ISA MIDI driver. A user already on the system could trigger a kernel memory boundary problem, causing denial of service and possibly other unspecified effects. The sources do not show remote exploitation or active exploitation. Exposure appears limited to systems running affected Linux kernels through 4.11.7 where the msnd MIDI driver is present and accessible to local users. Modern patched kernels are unlikely to be affected, but distribution backports require vendor verification. Treat this as a legacy Linux hygiene issue unless affected kernels remain in production. Prioritize patching shared systems, appliances, or environments with untrusted local users. Business urgency is lower than remote code execution but higher where uptime is critical. Mitigation focus: Update to a vendor kernel containing the upstream fix commit.; Review the relevant Linux distribution advisory for backported package versions.; Disable or restrict the affected MIDI driver if it is unnecessary..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.