Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 16, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 16, 2018 | Nov 16, 2017 |
| Debian | — | Upgrade linux | May 2, 2018 | Nov 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headers | Jan 30, 2018 | Nov 16, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 8, 2018 | Dec 5, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 15, 2018 | Nov 16, 2017 |
| Suse | — | Upgrade kgraft-patch-4_4_103-92_53-defaultUpgrade kernel-ec2-extraUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kernel-ec2-develUpgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kernel-docsUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kgraft-patch-4_4_59-92_17-defaultUpgrade kernel-ec2Upgrade kgraft-patch-4_4_59-92_20-defaultUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kgraft-patch-4_4_90-92_50-default | Apr 26, 2018 | Nov 16, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-kvmUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-gcpUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-oemUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-aws | Feb 24, 2018 | Nov 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub