A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-coreUpgrade bpftoolUpgrade perfUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-devel | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_18_1 | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-tools-libs | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade dtb-rockchipUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-zteUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amazonUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-syms | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-208-genericUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-208-lowlatency | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub