87 matches found
SUSE CVE-2026-90198
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...
CVE-2026-90198: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...
ROS-20260803-73-0022
The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...
PT-2026-116305
Уязвимость функции snd seq read компонента sound/core/seq/seq clientmgr.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность и доступность защищаемой...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on sndsoclookupcomponentnolocked soc-generic-dmaengine-pcm.c uses the same device for both CPU and Platform. In such cases, the CPU component driver may not have the required driver-name fiel...
WS-2021-0546
Linux/Kernel is vulnerable to negative period/buffer sizes in sound/core/oss/pcmoss.c...
snd_pcm_lib_free_pages Heap Buffer Overflow DoS
The vulnerability of the sndpcmlibfreepages function in the sound/core/pcmmemory.c module, which is part of Linux’s kernel-based audio card support, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
snd_jack_dev_register() Function Heap Buffer Overflow DoS
The vulnerability of the sndjackdevregister function in the sound/core/jack.c module, which supports audio cards in Linux operating systems, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003366 advisory. sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002735)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002735 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition,...
Linux snd_utimer_create() Heap Buffer Overflow DoS
The vulnerability of the sndutimercreate function in the sound/core/timer.c component of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a service failure...
sndctl LedSysfs_Add() DoS
The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...
sound/core/sound_kunit.c Heap Buffer Overflow DoS
The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux snd_seq_expand_var_event Heap Buffer Overflow DoS
The vulnerability of the sndseqexpandvarevent function in the sound/core/seq/seqmemory.c module of the Linux operating system is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux snd_pcm_attach_substream Heap Buffer Overflow DoS
The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
Linux Distros Unpatched Vulnerability : CVE-2016-2544
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service...
PT-2024-41811
Уязвимость функции snd dma wc alloc модуля sound/core/memalloc.c поддержки аудио карт ядра операционной системы Linux связана с неправильной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Oracle Linux 8 : kernel (ELSA-2020-3010)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3010 advisory. - vfio vfio/pci: Fix SR-IOV VF handling with MMIO blocking Alex Williamson 1837309 1837310 CVE-2020-12888 - x86 kvm: Clean up host's steal time structu...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...