CVE-2022-1048

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Score
CVSS 3.1 7.0 High
Status
Modified - secalert@redhat.com
Published
2022-04-29
Last modified
2024-08-02
Weaknesses
CWE-362, CWE-416

Affected products

References

 
 
© AVABIS GmbH privacypolicy about