In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
Currently the runtime.oss.trigger field may be accessed concurrently without protection, which may lead to the data race. And, in this case, it may lead to more severe problem because it's a bit field; as writing the data, it may overwrite other bit fields as well, which confuses the operation completely, as spotted by fuzzing.
Fix it by covering runtime.oss.trigger bit fled also with the existing params_lock mutex in both snd_pcm_oss_get_trigger() and snd_pcm_oss_poll().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-bosUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-azure-7.0Upgrade linux-image-laptop-23.10Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-26.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-nvidia-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04dUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oem-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-generic-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-7.0Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-oem-26.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-64kUpgrade linux-image-xilinxUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-azure-fde-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-aws-64k-7.0Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-raspi-7.0Upgrade linux-image-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-realtime-7.0Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-7.0Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-7.0.0-1009-azure-fde | Jul 20, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub