PT-2025-53070 · Linux · Linux Kernel

Published

2025-12-24

·

Updated

2026-03-24

·

CVE-2023-54072

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's ALSA PCM memory allocation helpers. A missing lock during a sanity check allows a user to potentially allocate more memory than the predefined maximum size. While this is described as a "soft limit" and unlimited allocation isn't possible, the issue leads to inconsistent behavior. The patch addresses this by covering the size check in the do alloc pages() function with the card->memory mutex, and adjusting the allocated size to prevent overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54072
RHSA-2024:2394
RHSA-2024:3138
SUSE-SU-2026:0263-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1

Affected Products

Linux Kernel