The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade kernel-pseries64Upgrade kernel-s390xUpgrade kernel-bigsmpUpgrade kernel-64k-pagesizeUpgrade kernel-smpUpgrade um-host-install-initrdUpgrade kernel-sourceUpgrade um-host-kernelUpgrade kernel-s390-debugUpgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-debugUpgrade suse-releaseUpgrade kernel-umUpgrade kernel-kdumpUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-s390Upgrade kernel-iseries64Upgrade kernel-sn2Upgrade kernel-pmac64Upgrade kernel-ppc64Upgrade kernel-s390x-debug | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-itanium | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub