In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Limit the period size to 16MB
Set the practical limit to the period size (the fragment shift in OSS) instead of a full 31bit; a too large value could lead to the exhaust of memory as we allocate temporary buffers of the period size, too.
As of this patch, we set to 16MB limit, which should cover all use cases.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-develUpgrade kernel-sourceUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-preemptUpgrade dtb-broadcom | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-hweUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-fips | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub