Description
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a kernel
Linux kernel 5.17-rc9affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2066706 ↗
- https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3 ↗
- https://www.debian.org/security/2022/dsa-5127 ↗
- https://security.netapp.com/advisory/ntap-20220629-0001/ ↗
- https://www.debian.org/security/2022/dsa-5173 ↗