In the Linux kernel, the following vulnerability has been resolved:
ALSA: aloop: Fix peer runtime UAF during format-change stop
loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 ("ALSA: aloop: Fix racy access at PCM trigger") moved the peer lookup under cable->lock, but the actual snd_pcm_stop() still runs after dropping that lock.
A concurrent close can clear the capture entry from cable->streams[] and detach or free its runtime while the playback trigger path still holds a stale peer substream pointer.
Keep a per-cable count of in-flight peer stops before dropping cable->lock, and make free_cable() wait for those stops before detaching the runtime. This preserves the existing behavior while making the peer runtime lifetime explicit.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-devel | Jun 22, 2026 | Jun 19, 2026 |
| Debian | — | Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 22, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules | Jun 24, 2026 | Jun 22, 2026 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04dUpgrade linux-image-realtime-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-7.0Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-generic-64k-7.0Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-awsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-7.0Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-7.0Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-aws-64k-7.0Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-ibm-7.0Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-oracleUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-fips | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub