Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-docUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelists | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.2.0-68-highbank | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub