The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.2.0-68-powerpc-smp | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub