PT-2023-33936 · Linux · Linux Kernel

Published

2023-01-17

·

Updated

2023-01-17

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.88
Description The issue is related to a potential use-after-free (UAF) vulnerability in the ALSA pcm component. The problem arises from the placement of the rwsem lock in the snd ctl elem read function. The actual impact and likelihood of an attack have not been confirmed.
Recommendations For Linux Kernel versions prior to v5.15.88, update to version v5.15.88 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

GSD-2023-1000859

Affected Products

Linux Kernel