sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 7, 2017 | Jun 17, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Jun 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs | Dec 4, 2017 | Jun 17, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 27, 2017 | Jun 12, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 1, 2017 | Jun 17, 2017 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-build | Jun 22, 2017 | Jun 17, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-87-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1022-gkeUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-4.4.0-87-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-1011-raspi2Upgrade linux-image-4.4.0-87-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-28-genericUpgrade linux-image-4.4.0-87-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-gkeUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-4.4.0-87-powerpc-smpUpgrade linux-image-4.4.0-1026-awsUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1067-snapdragonUpgrade linux-image-4.4.0-1065-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-87-generic-lpaeUpgrade linux-image-3.13.0-125-genericUpgrade linux-image-4.10.0-28-lowlatencyUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.10.0-28-generic-lpaeUpgrade linux-image-4.4.0-87-powerpc64-smpUpgrade linux-image-generic | Jul 21, 2017 | Jun 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub