The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Suse | — | Upgrade suse-releaseUpgrade kernel-pmac64Upgrade kernel-xenpaeUpgrade kernel-s390Upgrade kernel-umUpgrade kernel-ppc64Upgrade kernel-s390x-debugUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-sn2Upgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-sourceUpgrade um-host-install-initrdUpgrade kernel-smpUpgrade kernel-pseries64Upgrade kernel-bigsmpUpgrade um-host-kernelUpgrade kernel-s390-debugUpgrade kernel-s390xUpgrade kernel-64k-pagesize | Feb 17, 2015 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-powerpc-smp | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub