sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-docUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-tools | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc64-emb | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub