Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
•added 2026/09/17 2:39 p.m.•22 views

kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A lack of serialization in the userspace-driven timer utimer TRIGGER ioctl allows two threads to concurrently call sndtimerinterrupt. This race condition can lead to a use-after-free vulnerability, wher...

7.8CVSS6AI score0.0017EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•12 views

CVE-2026-68200

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer utimer TRIGGER ioctl calls sndtimerinterrupt directly with no serialization, so two threads triggering the same utimer can run...

7.8CVSS6.2AI score0.0017EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•3 views

CVE-2026-68200: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer utimer TRIGGER ioctl calls sndtimerinterrupt directly with no serialization, so two threads triggering the same utimer can run...

7.8CVSS6.2AI score0.0017EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2016-3621

Malware in sbrugna...

5.1CVSS6.9AI score0.00347EPSS
SaveExploits0References25
Mend
Mend
•added 2016/04/27 5:00 p.m.•1 views

CVE-2016-2545

The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service race condition and system crash via a crafted ioctl call...

5.9CVSS0.00347EPSS
SaveExploits0References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/27 12:00 a.m.•4 views

CVE-2016-2545: Concurrent Execution using Shared Resource with Improper Synchronization

The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service race condition and system crash via a crafted ioctl call...

5.1CVSS6.7AI score0.00347EPSS
SaveExploits0References2
Rows per page
Query Builder