PT-2025-8216 · Linux+4 · Linux Kernel+4
Takashi Iwai
·
Publicado
2022-03-22
·
Atualizado
2026-02-04
·
CVE-2022-49288
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a lack of protection against concurrent changes to PCM buffer preallocation via proc files in the Linux kernel, potentially leading to use-after-free (UAF) issues or other problems. The problem arises from the absence of synchronization during proc write operations and PCM stream opens.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linux Kernel
Red Hat
Suse