In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidia | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-gcp-6.14Upgrade linux-image-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-64kUpgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-64k-6.14 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub