Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 31, 2017 | Dec 28, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution existsUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdumpUpgrade kernel-debuginfoUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-docUpgrade kernel-kdump-debuginfoUpgrade python-perfUpgrade kernel-bootwrapperUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Dec 15, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 14, 2016 | Dec 14, 2016 |
| Ubuntu | — | Upgrade linux-image-generic-paeUpgrade linux-image-4.4.0-1044-snapdragonUpgrade linux-image-3.13.0-107-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-3.2.0-120-genericUpgrade linux-image-4.4.0-59-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-107-powerpc-e500Upgrade linux-image-4.4.0-59-powerpc-e500mcUpgrade linux-image-3.2.0-120-powerpc64-smpUpgrade linux-image-3.13.0-107-generic-lpaeUpgrade linux-image-3.2.0-1498-omap4Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-59-lowlatencyUpgrade linux-image-3.13.0-107-powerpc-e500mcUpgrade linux-image-4.4.0-59-powerpc-smpUpgrade linux-image-3.2.0-120-generic-paeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1040-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.2.0-120-powerpc-smpUpgrade linux-image-omap4Upgrade linux-image-virtualUpgrade linux-image-3.13.0-107-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-120-virtualUpgrade linux-image-4.4.0-59-powerpc64-smpUpgrade linux-image-3.2.0-120-highbankUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-107-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-107-powerpc64-smpUpgrade linux-image-3.13.0-107-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-highbankUpgrade linux-image-omapUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-59-genericUpgrade linux-image-4.4.0-59-generic-lpaeUpgrade linux-image-3.2.0-120-omap | Jan 12, 2017 | Dec 28, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub