CVE-2026-90198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

ROS-20260803-73-0022

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on sndsoclookupcomponentnolocked soc-generic-dmaengine-pcm.c uses the same device for both CPU and Platform. In such cases, the CPU component driver may not have the required driver-name fiel...

The vulnerability of the snd_pcm_lib_free_pages() function in the sound/core/pcm_memory.c module allows a hacker to cause a service failure in Linux-based systems.

The vulnerability of the sndpcmlibfreepages function in the sound/core/pcmmemory.c module, which is part of Linux’s kernel-based audio card support, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snd_jack_dev_register()` function in the sound/core/jack.c module allows a hacker to cause a service failure in Linux operating systems with integrated audio cards.

The vulnerability of the sndjackdevregister function in the sound/core/jack.c module, which supports audio cards in Linux operating systems, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003366 advisory. sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002735 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition,...

The vulnerability of the `snd_utimer_create()` function in the `sound/core/timer.c` file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sndutimercreate function in the sound/core/timer.c component of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a service failure...

The vulnerability of the test_format_fill_silence() function in the sound/core/sound_kunit.c module, which supports Linux kernel-based audio cards, allows a hacker to trigger a service failure.

The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `sndctl LedSysfs_Add()` function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the snd_seq_expand_var_event() function in the sound/core/seq/seq_memory.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sndseqexpandvarevent function in the sound/core/seq/seqmemory.c module of the Linux operating system is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snd_pcm_attach_substream()` function in the sound/core/pcm.c module, which is part of the Linux operating system’s audio card support mechanism, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Linux Distros Unpatched Vulnerability : CVE-2016-2544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service...

Oracle Linux 8 : kernel (ELSA-2020-3010)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3010 advisory. - vfio vfio/pci: Fix SR-IOV VF handling with MMIO blocking Alex Williamson 1837309 1837310 CVE-2020-12888 - x86 kvm: Clean up host's steal time structu...

ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...

ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...

ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...

K57397944: Linux kernel vulnerability CVE-2019-19807

Security Advisory Description In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimeropen and sndtimercloselocked. The timeri variable was originally intended to be for a newly created timer...

SUSE CVE-2016-2544

Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-free and system crash by making an ioctl call at a certain time...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2021-0169)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function...