CVE-2022-1048

State: Published
Severity: Not scored
Published: Apr 29, 2022
Updated: Aug 2, 2024
Reserved: Mar 22, 2022

Description

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Scores

The record has no CVSS score.

Weaknesses

CWE-416

Affected Products

Product	Versions
kerneln/a	Linux kernel 5.17-rc9Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2066706
https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3
DSA-5127vendor-advisory
https://security.netapp.com/advisory/ntap-20220629-0001/
DSA-5173vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.