A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-core | Nov 14, 2022 | Apr 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.109-104.500Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel | Jul 4, 2022 | Apr 29, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 29, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 15, 2022 | Mar 23, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64 | Mar 12, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-debug-baseUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-ec2-develUpgrade kselftests-kmp-defaultUpgrade kernel-ec2-baseUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dtb-zteUpgrade kernel-default-extraUpgrade kernel-traceUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-macrosUpgrade dtb-apmUpgrade kselftests-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-xen-baseUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-trace-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-xen-develUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-xenUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-preempt-optionalUpgrade kernel-64kbUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-ec2Upgrade kernel-defaultUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade kernel-default-kgraftUpgrade kernel-docs | Oct 26, 2022 | Apr 29, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-5.15.0-1010-azureUpgrade linux-image-4.15.0-1149-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-191-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1139-awsUpgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1011-raspiUpgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-5.15.0-37-genericUpgrade linux-image-6.1.0-1006-oemUpgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.14.0-1033-oemUpgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-5.4.0-124-genericUpgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-kvm | Apr 21, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub