Use-after-free

2023-02-0323:01:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

kernel

use-after-free

vulnerability

race condition

alsa pcm

local user

privilege escalation

system software

0.0004 Low

EPSS

Percentile

5.1%

JSON

kernel is vulnerable to Use-after-free. A user is able to trigger concurrent calls of PCM hw_params and hw_free ioctls causing race condition to happen inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CPENameOperatorVersion
kerneleq4.18.0__80.1.2.el8_0
kerneleq4.18.0__80.11.1.el8_0
kerneleq4.18.0__193.19.1.el8_2
kerneleq4.18.0__352.el8s
kerneleq4.18.0__147.el8
kerneleq4.18.0__383.el8
kerneleq4.18.0__305.0.1.el8
kerneleq4.18.0__348.el8
kerneleq4.18.0__269.el8
kerneleq4.18.0__193.24.1.el8_2.dt1

Name	Operator	Version
kernel	eq	4.18.0__80.1.2.el8_0
kernel	eq	4.18.0__80.11.1.el8_0
kernel	eq	4.18.0__193.19.1.el8_2
kernel	eq	4.18.0__352.el8s
kernel	eq	4.18.0__147.el8
kernel	eq	4.18.0__383.el8
kernel	eq	4.18.0__305.0.1.el8
kernel	eq	4.18.0__348.el8
kernel	eq	4.18.0__269.el8
kernel	eq	4.18.0__193.24.1.el8_2.dt1