The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade kernel-s390Upgrade kernel-iseries64Upgrade kernel-umUpgrade kernel-kdumpUpgrade kernel-pmac64Upgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-sn2Upgrade suse-releaseUpgrade kernel-s390x-debugUpgrade kernel-s390-debugUpgrade um-host-install-initrdUpgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-bigsmpUpgrade kernel-64k-pagesizeUpgrade um-host-kernel | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-rt | Nov 8, 2024 | Sep 26, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub