In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix negative period/buffer sizes
The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers.
This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-trace-develUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-ec2-develUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-ec2-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-xen-baseUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-xen-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade kernel-xenUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-traceUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azure | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-ibmUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linuxUpgrade linux-raspiUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-hwe | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub