Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: In the seq function, there is a issue where closing a re-opened queue timer occurs in the destructor. The queuedelete function closes the queue timer and then frees it. The sndseqtimerclose function clears q-timer-timeri. T...

PT-2026-86720

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock snd seq oss readq clear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A rese...

CVE-2026-74503 ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRVTIMERIFLGDEAD once the close completes sndtimercloselocked marks an instance with SNDRVTIMERIFLGDEAD and returns early when the flag is already set, but the flag is never cleared again. A completed close...

CVE-2026-74503

In the provided CVE-2026-74503 entries, the Linux kernel ALSA timer issue is resolved: snd_timer_close_locked() marks an instance with SNDRV_TIMER_IFLG_DEAD and a close can leave an object referenced if reopened mid‑process. The vulnerability concerns ALSA timer handling when closing snd_timer in...

CVE-2026-64479

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer. This vulnerability allows an unprivileged local user to trigger a heap information leak in the sndseqeventdup function. By reading from /dev/snd/seq, an attacker can obtain 4 bytes of uninitialized kernel hea...

EUVD-2026-48823

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005037 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix race of sndseqtimeropen The timer instance per queue is exclusive, and...

CLSA-2025-1739292069 kernel: Fix of 13 CVEs

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 - netfilter: xtables: fix LED ID check in ledtgcheck...

K03564319: Linux kernel vulnerability CVE-2018-7566

Security Advisory Description The Linux kernel 4.15 has a Buffer Overflow via an SNDRVSEQIOCTLSETCLIENTPOOL ioctl write operation to /dev/snd/seq by a local user. CVE-2018-7566 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

SUSE CVE-2016-2543

The sndseqioctlremoveevents function in sound/core/seq/seqclientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local users to cause a denial of service NULL pointer dereference and OOPS via a crafted ioctl call...

PT-2023-33439

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.302 Description The issue is related to a function prototype mismatch in the snd seq expand var event function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description A potential issue exists due to a race condition in the snd seq timer open function. The actual impact and likelihood of an attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-29410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue is related to a race condition in the snd seq timer open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-25489

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: A potential issue exists due to a race condition in the snd seq timer open function. The actual impact and likelihood of an attack have not been confirmed. Recommendations: For Linux Kernel...

PT-2021-25416

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: A potential issue exists in the ALSA seq component of the Linux Kernel, specifically related to the snd seq timer open function. The actual impact and likelihood of an attack have not been...

PT-2024-11285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition in the snd seq timer open function, where the timer instance per queue is exclusive, but concurrent accesses are not properly managed. This can...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. Local users are able to exploit a race condition in the ALSA subsystem to crash the application via malicious /dev/snd/seq ioctl calls. The crash is a result of a use-after-free UAF bug in sndseqioctlcreateport...

kernel: Use-after-free in snd_seq_ioctl_create_port()

A use-after-free vulnerability was found when issuing an ioctl to a sound device. This could allow a user to exploit a race condition and create memory corruption or possibly privilege escalation...

PT-2018-2840

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's implementation of the alsa seq dummy init handler for the sound/core/seq/snd-seq-dummy.ko module. An attacker can exploit this...

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...