In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kernel-azureUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oracle-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtualUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-realtime-hwe-24.04 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub