CVE-2022-3303

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Score
CVSS 3.1 4.7 Medium
Status
Modified - secalert@redhat.com
Published
2022-09-27
Last modified
2026-10-14
Weaknesses
CWE-362, CWE-667

Affected products

References

 
 
© AVABIS GmbH privacypolicy about