A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debuginfo | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-tools | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-zteUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-alUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatch-devel | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-awsUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-dell300xUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-208-genericUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-virtual | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub