In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix negative period/buffer sizes
The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers.
This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-traceUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-develUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-xenUpgrade kselftests-kmp-64kbUpgrade kernel-xen-develUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-manUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-trace-develUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-xen-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-trace-baseUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-ec2-baseUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kernel-ec2Upgrade kernel-default-livepatch-develUpgrade kernel-default-base | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub