CVE-2025-38078CWE-362

CVE-2025-38078

High · published June 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Fix race of buffer access at PCM OSS layer

The PCM OSS layer tries to clear the buffer with the silence data at

initialization (or reconfiguration) of a stream with the explicit call

of snd_pcm_format_set_silence() with runtime->dma_area. But this may

lead to a UAF because the accessed runtime->dma_area might be freed

concurrently, as it's performed outside the PCM ops.

For avoiding it, move the code into the PCM core and perform it inside

the buffer access lock, so that it won't be changed during the

operation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-06-18T14:15Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel< 5.4.2945.4.294
linux/linux_kernel≥ 5.5, < 5.10.2385.10.238
linux/linux_kernel≥ 5.11, < 5.15.1855.15.185
linux/linux_kernel≥ 5.16, < 6.1.1416.1.141
linux/linux_kernel≥ 6.2, < 6.6.936.6.93
linux/linux_kernel≥ 6.7, < 6.12.316.12.31
linux/linux_kernel≥ 6.13, < 6.14.96.14.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (10)
EPSS history
Timeline
  • 18 JUN 09:33Z
    ALSA: pcm: Fix race of buffer access at PCM OSS layer
    cvelistv5