sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-devel | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpc64-smp | Nov 8, 2024 | Jul 3, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub