A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade perfUpgrade python3-perfUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extra | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_10_1Upgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1 | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perf | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extra | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade kernel-syms-azureUpgrade dtb-alUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-cavium | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-6.1.0-1007-oemUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1035-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-raspiUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub