Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49288

ALSA: pcm: Fix races among concurrent prealloc proc writes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e7786c445bb67a9a6e64f66ebd6b7215b153ff7daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e14dca613e0a6ddc2bf6e360f16936a9f865205baffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 37b12c16beb6f6c1c3c678c1aacbc46525c250f7affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b560d670c87d7d40b3cf6949246fa4c7aa65a00aaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 51fce708ab8986a9879ee5da946a2cc120f1036daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a21d2f323b5a978dedf9ff1d50f101f85e39b3f2affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 69534c48ba8ce552ce383b3dfdb271ffe51820c3affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.14.279 to ≤ 4.14.*unaffected
  • 4.19.243 to ≤ 4.19.*unaffected
  • 5.4.193 to ≤ 5.4.*unaffected
  • 5.10.109 to ≤ 5.10.*unaffected
  • 5.15.32 to ≤ 5.15.*unaffected
  • 5.16.18 to ≤ 5.16.*unaffected
  • 5.17.1 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References