The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-headersUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perf | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-386 | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub