In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix negative period/buffer sizes
The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers.
This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-xen-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-traceUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-ec2-baseUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-xen-baseUpgrade kernel-ec2-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-trace-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-nvidia | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linuxUpgrade linux-oracle-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub