The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade um-host-install-initrdUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade um-host-kernelUpgrade kernel-smpUpgrade kernel-s390xUpgrade kernel-64k-pagesizeUpgrade kernel-s390-debugUpgrade kernel-pseries64Upgrade kernel-sn2Upgrade kernel-s390Upgrade kernel-debugUpgrade kernel-symsUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-s390x-debugUpgrade kernel-defaultUpgrade kernel-umUpgrade suse-releaseUpgrade kernel-xen | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-rt | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub