Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools-libs | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.2.0-68-highbank | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub