In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-amazon | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.14 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub