The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade kernel-s390Upgrade kernel-umUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-ppc64Upgrade kernel-s390x-debugUpgrade kernel-kdumpUpgrade suse-releaseUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-sn2Upgrade kernel-xenUpgrade kernel-64k-pagesizeUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-smpUpgrade kernel-sourceUpgrade um-host-install-initrdUpgrade kernel-s390xUpgrade um-host-kernelUpgrade kernel-s390-debug | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.20-17-mckinley | Nov 8, 2024 | Sep 26, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub