Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the audio-graph-card2 driver not releasing node references in graphgettype, which could lead to a reference...

PT-2025-26039 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak bug was found in the graph get type function of the Linux kernel's ASoc audio-graph-card2 component. The issue arises because of node put is not called for the referenc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the ASoC SOF driver during module reloading...

The vulnerability in the driver/usb/gadget/function/u_audio.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/gadget/function/uaudio.c module of the Linux operating system is related to the exhaustion of file descriptors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: qcom: Fixed potential buffer overflows in sc7280 lpass. Values introduced in commit 5f78e1fb7a3e “ASoC: qcom: Added driver support for audioreach solution” caused out-of-bounds access to array data in the sc7280 driver...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: Intel: hda-dai: Ensure that the DAI widget is valid during parameter processing. Each CPU DAI should be associated with a widget. However, the topology may not create the correct number of DAI widgets for aggregated...

Astra Linux – Vulnerability in ffmpeg

A reachable assertion in FFmpeg’s git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service DoS by opening a crafted AAC file...

Astra Linux – Vulnerability in libxmp

Libxmp through version 4.6.2 has a stack-based buffer overflow in the depackpha function in the loaders/prowizard/pha.c file, due to a malformed Pha format tracker module in a .mod file...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebAudio in Google Chrome before version 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMPDUMMY ETDM2INBE and ETDM1OUTBE are defined as COMPEMPTY, in the case where the codec dainame will be null. Avoid a crash if the device tree does not assign a codec to these...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: ipc4-topology: Strengthening the loops for querying ALH copiers Other non-DAI copier widgets may have the same stream name sname as the ALH copier. In that case, copier-data will be NULL, and no alhdata will be...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify the content returned by parseintarray. The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 will result in a null-ptr-deref error...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked in a similar manner as it is done in the sofsetstreamdataoffset function. Assuming that sps-cstream is not NULL when...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: do not use socpcmret on the .prepare callback. The commit 1f5664351410 states, “ASoC: lower the log severity when no backend DAIs are enabled for …”. This commit ignores the -EINVAL error message when using soc PCM...

TencentOS Server 3: bluez (TSSA-2025:0353)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0353 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an out-of-bounds read in Linux kernel's USB Audio driver [CVE-2024-53150]

Summary IBM Watson Speech Services Cartridge is vulnerable to an out-of-bounds read in Linux kernel's USB Audio driver, due to a failure to check bLength of each descriptor at traversing for clock descriptors CVE-2024-53150. Linux kernel's USB Audio driver is used in our speech microservices. Thi...

CVE-2025-49509

Missing Authorization vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audio Editor & Recorder: from n/a through = 2.2.1...

[SECURITY] Fedora 42 Update: qt6-qtvirtualkeyboard-6.9.1-1.fc42

The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 6. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...

[SECURITY] Fedora 42 Update: qt6-qtmultimedia-6.9.1-1.fc42

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

CVE-2025-49509

Missing Authorization vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audio Editor & Recorder: from n/a through = 2.2.1...