UBUNTU-CVE-2024-26654

In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard-timer could schedule the spudmawork and the spudmawork could also arm the dreamcastcard-timer. When the sndpcmsubstream is closing, the aicachannel wi...

CVE-2024-26654

Summary (CVE-2024-26654) : In the Linux kernel, the ALSA: sh: aica path could dereference a freed aica_channel due to a race between mod_timer/del_timer during PCM close, causing a use-after-free (UAF). Connected advisories confirm affected kernel families include Astra Linux advisories for Linux...

CVE-2024-26654 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs

In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard-timer could schedule the spudmawork and the spudmawork could also arm the dreamcastcard-timer. When the sndpcmsubstream is closing, the aicachannel wi...

CVE-2024-26654

In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard-timer could schedule the spudmawork and the spudmawork could also arm the dreamcastcard-timer. When the sndpcmsubstream is closing, the aicachannel wi...

CVE-2024-26654 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs

In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard-timer could schedule the spudmawork and the spudmawork could also arm the dreamcastcard-timer. When the sndpcmsubstream is closing, the aicachannel wi...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

Buffer overflow

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

CVE-2023-34351 affects Intel® PCM software prior to version 202307. The issue is a buffer underflow in PCM components that could allow an unauthenticated remote attacker to trigger a denial of service via network access. The CVSS v3.1 base score is 7.5 (High), with network attack vector, no privi...

Intel PCM Security Vulnerability

Intel PCM is an application programming interface API and a set of API-based tools from Intel Corporation. A security vulnerability exists in Intel PCM prior to version 202307, which stems from a buffer overflow issue that could cause an unauthenticated user to initiate a denial of service via...

PT-2024-1789 · Intel · Intel(R) Pcm

Name of the Vulnerable Software and Affected Versions: IntelR PCM software versions prior to 202307 Description: The issue is related to a buffer underflow in some IntelR PCM software, which may allow an unauthenticated user to potentially enable denial of service via network access. This could b...

Intel® PCM Software Advisory

Summary: A potential security vulnerability in some Intel® Performance Counter Monitor PCM software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34351 Description: Buffer underflow in some Intel®...

CVE-2023-33067

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

Memory corruption

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-33067 Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-33067

CVE-2023-33067 involves memory corruption in Qualcomm Audio when the START command is issued repeatedly on host voice PCM for the same RX/TX tap points. The description and connected sources consistently indicate a vulnerability in the audio path, with affected component appearing to be Qualcomm’...

CVE-2023-33067 Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-33110

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...