The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-devel | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.13.0-35-generic-lpae | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub