A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matched | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsource | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade dtb-alUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-docsUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-livepatch-devel | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-1022-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-dell300xUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-4.15.0-1153-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-oem-osp1Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1030-gke | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub