sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-zfcpdump | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.13.0-35-powerpc-e500mc | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub