A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matched | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_10_1-debuginfo | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-devel | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extra | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-alUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-zteUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extra | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.1.0-1007-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-4.15.0-1153-awsUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-38-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1022-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-awsUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-20.04 | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub