CVE-2014-4654

🗓️ 03 Jul 2014 00:00:00Reported by ubuntu.comType

The snd_ctl_elem_add function in ALSA control in Linux kernel before 3.15.2 allows unauthorized removal of controls, leading to denial of service via /dev/snd/controlCX access

Reporter	Title	Published	Views	Family All 323
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	10.04	all	linux	2.6.32-65.131	linux_2.6.32-65.131_all.deb
Ubuntu	12.04	all	linux	3.2.0-68.102	linux_3.2.0-68.102_all.deb
Ubuntu	14.04	all	linux	3.13.0-35.62	linux_3.13.0-35.62_all.deb
Ubuntu	12.04	all	linux-armadaxp	3.2.0-1637.54	linux-armadaxp_3.2.0-1637.54_all.deb
Ubuntu	10.04	all	linux-ec2	2.6.32-369.85	linux-ec2_2.6.32-369.85_all.deb
Ubuntu	12.04	all	linux-lts-trusty	3.13.0-35.62~precise1	linux-lts-trusty_3.13.0-35.62~precise1_all.deb
Ubuntu	12.04	all	linux-ti-omap4	3.2.0-1452.72	linux-ti-omap4_3.2.0-1452.72_all.deb

Source	Link
github	www.github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2014/06/26/6
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
git	www.git.kernel.org/
ubuntu	www.ubuntu.com/security/notices/USN-2332-1
ubuntu	www.ubuntu.com/security/notices/USN-2333-1
ubuntu	www.ubuntu.com/security/notices/USN-2334-1
ubuntu	www.ubuntu.com/security/notices/USN-2335-1
ubuntu	www.ubuntu.com/security/notices/USN-2336-1

04 Jul 2026 07:39Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.6

EPSS0.00498