In the Linux kernel, the following vulnerability has been resolved:
ALSA: aloop: Fix racy access at PCM trigger
The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are performed outside the cable lock, this may result in UAF when a program attempts to trigger frequently while opening/closing the tied stream, as spotted by fuzzers.
For addressing the UAF, this patch changes two things: - It covers the most of code in loopback_check_format() with cable->lock spinlock, and add the proper NULL checks. This avoids already some racy accesses. - In addition, now we try to check the state of the capture PCM stream that may be stopped in this function, which was the major pain point leading to UAF.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-64k-modules-extraUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64kUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump | Apr 3, 2026 | Mar 30, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Mar 31, 2026 | Feb 14, 2026 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-devel-matched | Apr 10, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8 | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub