CVE-2017-15265

🗓️ 16 Oct 2017 18:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 259 Views🌐 WEB

Race condition in ALSA subsystem in Linux kernel before 4.13.8 allows local users to cause denial of service or other impact by crafted /dev/snd/seq ioctl calls

Reporter	Title	Published	Views	Family All 248
ibm	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
ibm	Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM	18 Jun 201801:38	–	ibm
ibm	Security Bulletin: IBM Security Guardium is affected by Red Hat kernel vulnerabilities	6 Mar 201920:05	–	ibm
ibm	Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM	6 Jul 201823:49	–	ibm
altlinux	Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.44-alt0.M70P.1.1	17 Oct 201700:00	–	altlinux
altlinux	Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1	16 Nov 201700:00	–	altlinux
androidsecurity	Android Security Bulletin—February 2018Stay organized with collectionsSave and categorize content based on your preferences.	5 Feb 201800:00	–	androidsecurity
nessus	CentOS 7 : kernel (CESA-2018:1062)	27 Apr 201800:00	–	nessus
nessus	CentOS 6 : kernel (CESA-2018:2390) (Foreshadow)	15 Aug 201800:00	–	nessus
nessus	Debian DLA-1200-1 : linux security update (KRACK)	11 Dec 201700:00	–	nessus

NVD

Node

linux linux_kernelRange<3.2.95

linux linux_kernelRange3.3–3.10.108

linux linux_kernelRange3.11–3.16.50

linux linux_kernelRange3.17–3.18.76

linux linux_kernelRange3.19–4.1.46

linux linux_kernelRange4.2–4.4.93

linux linux_kernelRange4.5–4.9.57

linux linux_kernelRange4.10–4.13.8

Source	Link
securitytracker	www.securitytracker.com/id/1039561
access	www.access.redhat.com/errata/RHSA-2018:2390
access	www.access.redhat.com/errata/RHSA-2018:1170
access	www.access.redhat.com/errata/RHSA-2018:1130
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
access	www.access.redhat.com/errata/RHSA-2018:0676
access	www.access.redhat.com/errata/RHSA-2018:1062
help	www.help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
oracle	www.oracle.com/security-alerts/cpujul2020.html
git	www.git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/

Parameter	Position	Path	Description	CWE
ioctl	path	/dev/snd/seq	Race condition / use-after-free in ALSA seq via /dev/snd/seq ioctl leading to denial of service or other impact.	CWE-416, CWE-362

17 Jun 2026 01:07Current

7.4High risk

Vulners AI Score7.4

CVSS 26.9

CVSS 3.17

EPSS0.00377