A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade perf | Mar 28, 2023 | Jan 30, 2023 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1 | Mar 28, 2023 | Jan 30, 2023 |
| Debian | — | Upgrade linux | Jan 25, 2023 | Jan 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs | Jun 9, 2023 | Jan 30, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 17, 2023 | Jan 13, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 16, 2023 | Jan 30, 2023 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-debug | Mar 12, 2024 | Jan 30, 2023 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-azure-baseUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-default-man | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-208-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-4.15.0-208-genericUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-4.15.0-1116-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-4.15.0-1147-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-4.15.0-1129-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-38-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1153-awsUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-virtualUpgrade linux-image-dell300xUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-208-generic-lpaeUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1148-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-snapdragonUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-4.15.0-1137-kvmUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1022-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-4.15.0-1062-dell300xUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04 | Mar 22, 2023 | Jan 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub