In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dtb-amdUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kselftests-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-intelUpgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-azureUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub