Name: CVE-2023-0266: Use After Free
Creator: Rapid7
Published: 2023-01-30T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-0266, CWE-416, Exploited in the Wild, CISA KEV Exploit, CVSS 7.9, EPSS 0.03672, CISA KEV

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

CVSS Details

CVSS 3.1 Base Score: 7.9
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules	Mar 28, 2023	Jan 30, 2023
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Jan 30, 2023
Centos_linux	—	Upgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfo	Mar 28, 2023	Jan 30, 2023
Debian	—	Upgrade linux	Jan 25, 2023	Jan 25, 2023
Huawei Euleros 2_0_sp5	—	Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs	Jun 9, 2023	Jan 30, 2023
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	Mar 17, 2023	Jan 13, 2023
Redhat_linux	—	Upgrade kernel-rtUpgrade kernel	Mar 16, 2023	Jan 30, 2023
Rocky_linux	—	Upgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-core	Mar 12, 2024	Jan 30, 2023
Suse	—	Upgrade kernel-default-manUpgrade kernel-symsUpgrade dtb-zteUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-macrosUpgrade dtb-alUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-azure-baseUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-docs	Jan 27, 2023	Jan 26, 2023
Ubuntu	—	Upgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-6.1.0-1007-oemUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-dell300xUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1022-azureUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-azure-fde	Mar 22, 2023	Jan 30, 2023
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 30, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence