CVE-2022-49288

ALSA: pcm: Fix races among concurrent prealloc proc writes

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Fix races among concurrent prealloc proc writes

We have no protection against concurrent PCM buffer preallocation

changes via proc files, and it may potentially lead to UAF or some

weird problem. This patch applies the PCM open_mutex to the proc

write operation for avoiding the racy proc writes and the PCM stream

open (and further operations).

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Published
2025-02-26T01:56Z
EPSS history
Timeline
  • 26 FEB 01:56Z
    ALSA: pcm: Fix races among concurrent prealloc proc writes
    cvelistv5