CVE-2022-49733

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...

CVE-2022-49733: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...

CVE-2022-49292

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2021-47511

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with sizet. Due to that, a to...

CVE-2021-47509: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Limit the period size to 16MB Set the practical limit to the period size the fragment shift in OSS instead of a full 31bit; a too large value could lead to the exhaust of memory as we allocate temporary buffers of...

PT-2024-8912

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ALSA pcm oss component in the Linux kernel, where a too large period size could lead to memory exhaustion as temporary buffers of the period size are...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-34614 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A race condition issue exists in the ALSA pcm oss component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.9,...

PT-2025-9212

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's ALSA pcm oss component. The issue occurs in the snd pcm oss sync function, which is called from the OSS PCM SNDCTL DSP SYNC ioctl. This...

PT-2022-30557

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to a buffer allocation overflow in the PCM OSS of the ALSA module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.18 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA system. The actual impact and potential for attack have not been fully determined. Recommendations For Linux Kernel...

PT-2022-30425

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.109 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and potential for attack have not been fully...

PT-2022-30214

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2022-29605

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.1 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and potential for attack have not been fully determine...

PT-2022-30651

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.237 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2025-8220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer allocation overflow issue has been identified in the Linux kernel, specifically in the ALSA oss PCM OSS layer. The problem occurs when the size of a temporary buffer for data...

GSD-2021-1002406 ALSA: pcm: oss: Fix negative period/buffer sizes

ALSA: pcm: oss: Fix negative period/buffer sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002383 ALSA: pcm: oss: Limit the period size to 16MB

ALSA: pcm: oss: Limit the period size to 16MB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.293 by commit...

PT-2021-26928

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.165 Description The issue is related to the ALSA pcm oss component, where the period size is limited to 16MB. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...