CVE-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats()

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68347

CVE-2025-68347 (Linux kernel, ALSA: firewire-motu) The vulnerability is in the DSP event handling in hwdep_read() where the code could copy more bytes to the user buffer than requested when the buffer is smaller than the 8-byte event header. The issue is resolved by using min_t() to clamp the cop...

UBUNTU-CVE-2025-68617

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS file can trigger a heap-based use-after-free. A concurrently running thread may be pending to unload a DLS file, leading to use of freed...

CVE-2025-68617 Use after free in fluidsynth

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS file can trigger a heap-based use-after-free. A concurrently running thread may be pending to unload a DLS file, leading to use of freed...

fluidsynth -- Use after free when using DLS files

The fluidsynth authors report: A race condition during unloading of a DLS file can trigger a heap-based use-after-free. A concurrently running thread may be pending to unload a DLS file, leading to use of freed memory, if the synthesizer is being concurrently destroyed, or samples of the unloaded...

The vulnerability in the sound support module sound/soc/intel/common/soc-acpi-intel-rpl-match.c of the Linux operating system’s SoC kernel allows a attacker to cause a service failure.

The vulnerability in the sound-related module sound/soc/intel/common/soc-acpi-intel-rpl-match.c of the Linux operating system’s SoC kernel is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2023-53965

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute...

CVE-2023-53964

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...

SOUND4多款产品 访问控制错误漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An access control error vulnerability exists in various SOUND4 products that originates in th...

kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...

The vulnerability of the `snd_utimer_create()` function in the `sound/core/timer.c` file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sndutimercreate function in the sound/core/timer.c component of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a service failure...

The vulnerability of the imx_audmix_probe() function in the sound module/soc/fsl/imx-audmix.c file allows a hacker to cause a system failure within the Linux operating system’s SoC audio kernel.

The vulnerability of the imxaudmixprobe function in the sound/soc/fsl/imx-audmix.c file, which is part of the Linux operating system’s sound support for SoC cores, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the sound/soc/soc-core.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sound/soc/soc-core.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the sound/usb/validate.c component of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2023-53842

A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...

PT-2026-37597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the Linux kernel within the snd cx88 hw params function. The issue arises because the error path fails to call cx88 alsa dma unmap, which is necessary to releas...

Linux Distros Unpatched Vulnerability : CVE-2023-53842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied ...

EUVD-2025-201864

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

EUVD-2023-60154

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...