CVE-2024-53150: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus descripto...

AlmaLinux 9 : unbound:1.16.2 (ALSA-2024:11232)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11232 advisory. unbound: Unbounded name compression could lead to Denial of Service CVE-2024-8508 Tenable has extracted the preceding description block directly from the AlmaLinu...

AlmaLinux 9 : edk2:20240524 (ALSA-2024:11219)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11219 advisory. edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 Tenable has extracted the preceding description block directly from the AlmaLinux security...

PT-2025-3579

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ 759 Description A vulnerability in the Linux kernel has been resolved, related to the ALSA memalloc component. The issue arises when the CONFIG DMA API DEBUG...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 CVE-2024-50089:...

AlmaLinux 8 : libsndfile (ALSA-2024:11192)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11192 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : python3.11 (ALSA-2024:10979)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:10979 advisory. python: Virtual environment venv activation scripts don't quote paths CVE-2024-9287 Tenable has extracted the preceding description block directly from the...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50007)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50007 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50160)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50160 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50205)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50205 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by ze...

PT-2024-36966

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, related to the ALSA control, where the use of WARN for showing symlink creation errors was downgraded to dev err to avoid confusing fuzzer...

ALSA Kernel Component DoS

The vulnerability of the ALSA kernel component in Linux operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Unbreakable Enterprise kernel security update

4.1.12-124.92.3 - memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021 - ocfs2: fix races between hole punching and AIO+DIO Su Yue Orabug: 36835819 CVE-2024-40943 4.1.12-124.92.2 - fbdev: savage: Handle err return when savagefbcheckvar failed Cai Xinchen...

PT-2024-37006

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL dereference vulnerability has been identified in the Linux kernel, specifically in the ALSA core. The issue is caused by the function kunit kzalloc, which may return a NU...

CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

AlmaLinux 9 : kernel (ALSA-2024:9605)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:9605 advisory. kernel: net: nexthop: Initialize all fields in dumped nexthops CVE-2024-42283 kernel: iommufd: Require drivers to supply the cacheinvalidateuser ops...

UBUNTU-CVE-2024-53045

In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapmwidgetlistcreate The widgets array in the sndsocdapmwidgetlist has a countedby attribute attached to it, which points to the numwidgets variable. This attribute is used in bounds...

CVE-2024-50160

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

PT-2024-35687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ALSA 6fire code in the Linux kernel, where resources are released at the wrong time, potentially leading to use-after-free UAF errors. The current code tries ...

kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/csdspctl: Use privatefree for control cleanup Use the control privatefree callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original...