A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-modules | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kernel-rt | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-tools | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade dtb-alUpgrade dtb-alteraUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kb | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-4.15.0-1153-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-awsUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-raspiUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.4.0-1095-gke | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub