A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-rt-debug-core | Nov 14, 2022 | Apr 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.109-104.500Upgrade kernel | Jul 4, 2022 | Apr 29, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 29, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 15, 2022 | Mar 23, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade python3-perfUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo | Mar 12, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-traceUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-baseUpgrade dtb-alUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-ec2-baseUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-ec2-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-zteUpgrade dtb-marvellUpgrade kernel-trace-baseUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade kernel-ec2Upgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade kernel-vanillaUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-default-kgraftUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-vanilla-baseUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-trace-develUpgrade dlm-kmp-defaultUpgrade kernel-xenUpgrade dtb-mediatek | Oct 26, 2022 | Apr 29, 2022 |
| Ubuntu | — | Upgrade linux-image-6.1.0-1006-oemUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-5.15.0-1010-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1149-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-37-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-5.15.0-1011-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1139-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-oemUpgrade linux-image-4.15.0-191-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-124-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.14.0-1033-oemUpgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-bluefieldUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1125-kvm | Apr 21, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub