509 matches found
UBUNTU-CVE-2023-53854
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function in the "remove" path for a device it runs them in the reverse order. That means that if you have parts of your driver that aren't using devm...
CVE-2025-40344
CVE-2025-40344 concerns the Linux kernel ASoC Intel avs driver. The vulnerability arises from a race between shutdown of the HOST HDA audio DAI (avs_dai_fe_shutdown) and the period-elapsed work handling its IRQs. The shutdown path frees the DAI private context while period-elapsed work may still ...
CVE-2023-53854
The CVE CVE-2023-53854 concerns ASoC: mediatek mt8186 with a use-after-free in the driver remove path. The root cause was incorrect removal-time ordering of devm-managed resources in mt8186_init_clock(): the code registered clocks (mt8186_audsys_clk_register), allocated clock resources, then retr...
PT-2025-49745
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function in the "remove" path for a device it runs them in the reverse order. That means that if you have parts of your driver that aren't using devm...
Linux Distros Unpatched Vulnerability : CVE-2025-40344
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avsdaifeshutdown handles the shutdown procedure for HOST HDAudio stream while period-elapsed wor...
SUSE CVE-2025-40269
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each packet size is determined dynamically. The packet sizes are limited by so...
kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: ALSA: usb-audio: ALSA USB Audio Out-of-Bounds Bug
A flaw was found in the Linux kernel ALSA USB audio driver. This vulnerability allows a denial of service via a crafted USB audio device...
CVE-2025-40154 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcrrt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcrrt5640 driver only shows an error message but leaves as is. This may lead to unepxected results like OOB...
CVE-2025-40121
CVE-2025-40121 affects the Linux kernel ASoC Intel bytcr_rt5651 driver. The issue arises when an invalid value is passed to the quirk option, previously causing the bytcr_rt5651/bytcr_rt5640 path to ignore the invalid input and proceed with potentially unsafe mappings. The patch adds a sanity che...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990556)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990556 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988886)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988886 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988926)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988926 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988752)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988752 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign...
CVE-2025-40097
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hdacomponentmanagerinit function The componentmatchadd function may assign the 'matchptr' pointer the value ERRPTR-ENOMEM, which will subsequently be dereferenced. The call stack leading to...
EUVD-2021-19806
Malware in sbrugna...
EUVD-2016-6787
Malware in sbrugna...