In the Linux kernel, the following vulnerability has been resolved:
ALSA: aloop: Fix racy access at PCM trigger
The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are performed outside the cable lock, this may result in UAF when a program attempts to trigger frequently while opening/closing the tied stream, as spotted by fuzzers.
For addressing the UAF, this patch changes two things: - It covers the most of code in loopback_check_format() with cable->lock spinlock, and add the proper NULL checks. This avoids already some racy accesses. - In addition, now we try to check the state of the capture PCM stream that may be stopped in this function, which was the major pain point leading to UAF.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade rtlaUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-rt-64k-modulesUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-develUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernelUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-core | Apr 3, 2026 | Mar 30, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Mar 31, 2026 | Feb 14, 2026 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-debuginfoUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extra-matchedUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade rtla | Apr 10, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1058-gcp-64k | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub