The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade kernel-sn2Upgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-ppc64Upgrade kernel-umUpgrade kernel-s390x-debugUpgrade kernel-xenpaeUpgrade suse-releaseUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-kdumpUpgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-s390-debugUpgrade kernel-s390xUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade um-host-install-initrdUpgrade kernel-pseries64 | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-sparc64-smp | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub