Linux · Linux Kernel · CVE-2022-49733
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
A race condition exists in the Linux kernel's ALSA pcm oss component. The issue occurs in the `snd pcm oss sync()` function, which is called from the OSS PCM `SNDCTL DSP SYNC` ioctl. This function first calls `snd pcm oss make ready()`, then takes the `params lock` mutex. If the stream is set up again by another thread between these two operations, it can lead to inconsistency and potentially result in unexpected behavior, such as a NULL dereference of the OSS buffer.
**Recommendations**
To resolve this issue, apply the fix that covers the `snd pcm oss make ready()` call with the `snd pcm oss make ready locked()` variant within the same `params lock` mutex.