Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 16, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 16, 2018 | Nov 16, 2017 |
| Debian | — | Upgrade linux | May 2, 2018 | Nov 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel | Jan 30, 2018 | Nov 16, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 8, 2018 | Dec 5, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 15, 2018 | Nov 16, 2017 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kgraft-patch-4_4_103-92_53-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kernel-ec2Upgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kgraft-patch-4_4_59-92_20-defaultUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kgraft-patch-4_4_90-92_50-defaultUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_4_59-92_17-default | Apr 26, 2018 | Nov 16, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.13.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-119-generic-lpae | Feb 24, 2018 | Nov 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub