In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-develUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-default-man | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-5.15Upgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub