In the Linux kernel, the following vulnerability has been resolved:
ALSA: aloop: Fix racy access at PCM trigger
The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are performed outside the cable lock, this may result in UAF when a program attempts to trigger frequently while opening/closing the tied stream, as spotted by fuzzers.
For addressing the UAF, this patch changes two things: - It covers the most of code in loopback_check_format() with cable->lock spinlock, and add the proper NULL checks. This avoids already some racy accesses. - In addition, now we try to check the state of the capture PCM stream that may be stopped in this function, which was the major pain point leading to UAF.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-rtUpgrade rvUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernelUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64kUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-core | Apr 3, 2026 | Mar 30, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Mar 31, 2026 | Feb 14, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade libperf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade perf | Apr 10, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-xilinxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvm | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub