In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race of buffer access at PCM OSS layer
The PCM OSS layer tries to clear the buffer with the silence data at initialization (or reconfiguration) of a stream with the explicit call of snd_pcm_format_set_silence() with runtime->dma_area. But this may lead to a UAF because the accessed runtime->dma_area might be freed concurrently, as it's performed outside the PCM ops.
For avoiding it, move the code into the PCM core and perform it inside the buffer access lock, so that it won't be changed during the operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdump | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-gke-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-virtualUpgrade linux-image-realtime-5.15Upgrade linux-image-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-intelUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-generic-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub