CVE-2024-38618

ALSA: timer: Set lower bound of start tick time

State: Published
Severity: 5.3 Medium
Published: Jun 19, 2024
Updated: May 11, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: timer: Set lower bound of start tick time

Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to an unexpected RCU stall, where the callback repeatedly queuing the expire update, as reported by fuzzer.

This patch introduces a sanity check of the timer start tick time, so that the system returns an error when a too small start size is set. As of this patch, the lower limit is hard-coded to 100us, which is small enough but can still work somehow.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 68396c825c43664b20a3a1ba546844deb2b4e48fAffected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 74bfb8d90f2601718ae203faf45a196844c01fa1Affected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before bdd0aa055b8ec7e24bbc19513f3231958741d0abAffected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 83f0ba8592b9e258fd80ac6486510ab1dcd7ad6eAffected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before ceab795a67dd28dd942d0d8bba648c6c0f7a044bAffected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 2c95241ac5fc90c929d6c0c023e84bf0d30e84c3Affected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before abb1ad69d98cf1ff25bb14fff0e7c3f66239e1cdAffected bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 4a63bd179fa8d3fcc44a0d9d71d941ddd62f0c4eAffected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.3 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 68396c825c43664b20a3a1ba546844deb2b4e48fAffected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 74bfb8d90f2601718ae203faf45a196844c01fa1Affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before bdd0aa055b8ec7e24bbc19513f3231958741d0abAffected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 83f0ba8592b9e258fd80ac6486510ab1dcd7ad6eAffected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before ceab795a67dd28dd942d0d8bba648c6c0f7a044bAffected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 2c95241ac5fc90c929d6c0c023e84bf0d30e84c3Affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before abb1ad69d98cf1ff25bb14fff0e7c3f66239e1cdAffected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 to before 4a63bd179fa8d3fcc44a0d9d71d941ddd62f0c4eAffected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.3 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.