In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix negative period/buffer sizes
The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers.
This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-xenUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-xen-develUpgrade kernel-develUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-ec2-baseUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-trace-develUpgrade kernel-rt-vdsoUpgrade kernel-ec2-develUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-ec2Upgrade dtb-amdUpgrade kernel-trace-baseUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-xen-baseUpgrade kernel-syms-rtUpgrade kernel-64kb-extra | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-fde-5.15Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-gkeopUpgrade linuxUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-aws-fips | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub