The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-tools | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-virtual | Nov 8, 2024 | Jul 3, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub