The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2010 |
| Suse | — | Upgrade kernel-source-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rtUpgrade kernel-vanilla-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ppc64Upgrade kernel-vmi-baseUpgrade um-host-install-initrdUpgrade kernel-vmi-develUpgrade kernel-pseries64Upgrade kernel-ec2-extraUpgrade kernel-kdumpUpgrade kernel-s390Upgrade kernel-64k-pagesizeUpgrade kernel-xenpaeUpgrade kernel-rt_trace-baseUpgrade kernel-smpUpgrade kernel-debug-baseUpgrade kernel-ec2-baseUpgrade preload-kmp-desktopUpgrade kernel-s390xUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade cluster-network-kmp-rtUpgrade preload-kmp-defaultUpgrade kernel-rt_trace-develUpgrade kernel-desktop-develUpgrade kernel-default-baseUpgrade kernel-rt_traceUpgrade kernel-iseries64Upgrade kernel-pae-baseUpgrade ocfs2-kmp-rtUpgrade xen-kmpUpgrade kernel-syms-rtUpgrade um-host-kernelUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-ec2-develUpgrade kernel-kdumppaeUpgrade kernel-pmac64Upgrade kernel-desktop-baseUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-traceUpgrade drbd-kmp-rtUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-rt-baseUpgrade kernel-s390-debugUpgrade kernel-vanilla-baseUpgrade kernel-desktopUpgrade kernel-vmiUpgrade ofed-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-s390x-debugUpgrade kernel-vmipaeUpgrade brocade-bna-kmp-rtUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-ec2Upgrade kernel-sn2Upgrade kernel-vanillaUpgrade kernel-umUpgrade iscsitarget-kmp-rt | Feb 17, 2015 | Jan 13, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.15-57-powerpc-smpUpgrade linux-image-2.6.15-57-sparc64Upgrade linux-image-2.6.15-57-k7Upgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.15-57-amd64-xeonUpgrade linux-image-2.6.15-57-mckinleyUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.15-57-hppa64Upgrade linux-image-2.6.15-57-server-bigironUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.15-57-itanium-smpUpgrade linux-image-2.6.15-57-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.15-57-amd64-k8Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.15-57-amd64-serverUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.15-57-hppa64-smpUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-57-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.15-57-386Upgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.15-57-itaniumUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.15-57-mckinley-smpUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.15-57-686Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.15-57-sparc64-smpUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.15-57-powerpcUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.15-57-hppa32-smpUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.15-57-hppa32Upgrade linux-image-2.6.15-57-amd64-genericUpgrade linux-image-2.6.35-30-generic-pae | Nov 8, 2024 | Jan 13, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub