Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: In the seq function, there is a issue where closing a re-opened queue timer occurs in the destructor. The queuedelete function closes the queue timer and then frees it. The sndseqtimerclose function clears q-timer-timeri. T...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

A race condition was found in the Linux kernel’s sound/hda device driver within the sndhdacregmapsync function. This may lead to a null pointer dereference issue, potentially resulting in a kernel panic or denial of service. PwrCmdWrite...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix a possible null-pointer dereference due to data race in sndhdacregmapsync The variable codec-regmap is often protected by the lock codec-regmaplock when it is accessed. However, it is accessed without holding the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: core: Fixed a use-after-free in sndsocexit. KASAN reported a use-after-free: BUG: KASAN: Use-after-free in devicedel+0xb5b/0xc60. A read of size 8 at address ffff888008655050 was performed by the task rmmod/387. CPU: 2;...

PT-2026-115764

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via snd card free, and it synchronizes with the whole release procedure. However, when the card is...

PT-2026-115804

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-private data before registering the PCM timer snd pcm timer init calls snd device register to link the new struct snd timer into the global timer list while it still carries hw.c resolution = snd pcm timer...

PT-2026-106595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA core. When a sound driver, such as the USB-audio driver, releases a card asynchronously using the snd card free when closed function, in-flight...

PT-2026-98669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the ALSA caiaq device. The epq in urb and midi out urb objects are coupled within the struct snd usb caiaqdev. When init card calls snd usb caiaq se...

PT-2026-94467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA component where the snd ice1712 probe function fails to release the ALSA card when initialization steps following snd card new encounter an error. This failur...

PT-2026-94562

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC xilinx formatter pcm component where stream data is leaked during an open error. In the xlnx formatter pcm open function, stream data is allocated and assigne...

PT-2026-94408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA control LED state layer where the system assumes all associated kcontrol elements are readable. If a write-only element is created without a get callback, it...

PT-2026-94555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer MIDI component where the snd midi input event function can run while a rawmidi substream is closing. This creates a race condition in snd rawmidi...

PT-2026-94464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA mtpav component where the snd mtpav output timer function rearms the chip-timer while holding the chip-spinlock and accesses card-private mtpav state. The snd...

PT-2026-93585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the ASOC hdac hda component. The hdac hda dev probe function acquires an HDA link using snd hdac ext bus link get before registering the ASoC component. ...

PT-2026-93531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the go7007 media driver. The go7007 snd remove function releases the v4l2 device reference too early when a userspace process still has the capture PCM...

PT-2026-93536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the cobalt media component. The function snd cobalt card create assigns a pointer to sc-private data and sets snd cobalt card private free as the cleanup...

PT-2026-93674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the snd usbmidi us122l output function. The issue occurs when the function selects a count of 2 for devices slower than high speed without verifying it...

PT-2026-93621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA harmony component, the snd harmony create function registers the IRQ before initializing the h-lock and h-mixer lock variables. This sequence allows a pending interrupt to...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fixed a UAF issue with the sndsocpcmruntime object. When using the kernel with the following additional configurations: - CONFIGKASAN=y - CONFIGKASANGENERIC=y - CONFIGKASANINLINE=y - CONFIGKASANVMALLOC=y -...

PT-2026-85707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the ALSA usb-audio component. The function snd usbmidi novation output calculates a length for snd rawmidi transmit by subtracting 2 from ep-max transfer...