A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade perfUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-modules | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kernel | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-devel | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-extra | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade kernel-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-zteUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade dtb-alUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-6.1.0-1007-oemUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.19.0-38-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-208-genericUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-aws-lts-20.04 | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub