claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — alsa-lib OOB Write Reproducer Standalone C reproducer for CVE-2026-90781 , a 1-byte out-of-bounds write in alsa-lib's sndctlasciielemidparse when parsing name= both quoted and unquoted forms. Vulnerability In src/control/ctlparse.c v1.2.16.1 and earlier development HEAD: char...

kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

kernel: ALSA: ua101: reject mismatched capture/playback packet sizes

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initialization. An attacker who connects a specially crafted USB...

Medium: alsa-lib

Issue Overview: alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state fil...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: ALSA: hda/cs35l41: Fix firmware load work teardown

A flaw was found in the Linux kernel's ALSA sound driver for the cs35l41 component. This vulnerability occurs because the driver fails to properly remove controls and cancel firmware load work during component unbinding or device removal, especially when firmware autostart is disabled. This can...

kernel: ALSA: usx2y: bound the hwdep mmap fault offset

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

kernel: ALSA: seq: midi: Serialize input teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to caus...

kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

kernel: ALSA: hda/cs35l41: Fix firmware load work teardown

A flaw was found in the Linux kernel's ALSA sound driver for the cs35l41 component. This vulnerability occurs because the driver fails to properly remove controls and cancel firmware load work during component unbinding or device removal, especially when firmware autostart is disabled. This can...