A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-rt-debug | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1 | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headers | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extra | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade dtb-zteUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-alUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-default | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-gke-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-oemUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-hweUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-azure | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub