In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix negative period/buffer sizes
The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers.
This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-traceUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-xenUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-trace-develUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-trace-baseUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade kernel-ec2-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-xen-baseUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-ec2-base | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-azureUpgrade linux-ibm-5.4Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linuxUpgrade linux-kvmUpgrade linux-aws-fips | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub