CVE-2017-0861

High

Published: 16/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to privilege escalation and damage.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in ALSA subsystem in the Linux kernel

CVE-2014-9904High
The snd_compress_check_input function in the ALSA subsystem in the Linux kernel before version 3.17 does not properly check for integer overflow, which may lead to denial of service due to insufficient memory allocation or other unspecified impacts.

Original NVD description (English source)

Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.