The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debug | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-386Upgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.2.0-68-powerpc-smp | Nov 8, 2024 | Jul 3, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub