In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Limit the period size to 16MB
Set the practical limit to the period size (the fragment shift in OSS) instead of a full 31bit; a too large value could lead to the exhaust of memory as we allocate temporary buffers of the period size, too.
As of this patch, we set to 16MB limit, which should cover all use cases.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-bluefieldUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-gcpUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-aws-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub