CVE-2022-49288

ALSA: pcm: Fix races among concurrent prealloc proc writes

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Fix races among concurrent prealloc proc writes

We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e7786c445bb67a9a6e64f66ebd6b7215b153ff7dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e14dca613e0a6ddc2bf6e360f16936a9f865205bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 37b12c16beb6f6c1c3c678c1aacbc46525c250f7Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b560d670c87d7d40b3cf6949246fa4c7aa65a00aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51fce708ab8986a9879ee5da946a2cc120f1036dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a21d2f323b5a978dedf9ff1d50f101f85e39b3f2Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 69534c48ba8ce552ce383b3dfdb271ffe51820c3Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.279 through 4.14.Not affected 4.19.243 through 4.19.Not affected 5.4.193 through 5.4.Not affected 5.10.109 through 5.10.Not affected 5.15.32 through 5.15.Not affected 5.16.18 through 5.16.Not affected 5.17.1 through 5.17.*Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e7786c445bb67a9a6e64f66ebd6b7215b153ff7dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e14dca613e0a6ddc2bf6e360f16936a9f865205bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 37b12c16beb6f6c1c3c678c1aacbc46525c250f7Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b560d670c87d7d40b3cf6949246fa4c7aa65a00aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51fce708ab8986a9879ee5da946a2cc120f1036dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a21d2f323b5a978dedf9ff1d50f101f85e39b3f2Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 69534c48ba8ce552ce383b3dfdb271ffe51820c3Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.279 through 4.14.*Not affected
4.19.243 through 4.19.*Not affected
5.4.193 through 5.4.*Not affected
5.10.109 through 5.10.*Not affected
5.15.32 through 5.15.*Not affected
5.16.18 through 5.16.*Not affected
5.17.1 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.