The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade python-perfUpgrade kernel-tools-libs | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdump | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-386 | Nov 8, 2024 | Jul 3, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub