Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 16, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 16, 2018 | Nov 16, 2017 |
| Debian | — | Upgrade linux | May 2, 2018 | Nov 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perf | Jan 30, 2018 | Nov 16, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 8, 2018 | Dec 5, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 15, 2018 | Nov 16, 2017 |
| Suse | — | Upgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kgraft-patch-4_4_103-92_53-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_4_90-92_50-defaultUpgrade kernel-ec2Upgrade kgraft-patch-4_4_59-92_20-defaultUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kgraft-patch-4_4_59-92_17-default | Apr 26, 2018 | Nov 16, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-gke | Feb 24, 2018 | Nov 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub