CVE-2017-15265

High

Published: 16/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A race condition in the ALSA subsystem in Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls.

Risk Assessment

This vulnerability may lead to system crashes or unauthorized access to resources, posing a threat to system stability and security.

Recommendation

It is recommended to update the Linux kernel to version 4.13.8 or later to mitigate this vulnerability.

Other vulnerabilities in Podsystem ALSA w jądrze Linux

CVE-2012-6703High
Integer overflow in the snd_compr_allocate_buffer function in the ALSA subsystem in the Linux kernel before version 3.6-rc6-next-20120917 may lead to insufficient memory allocation, resulting in denial of service.

Original NVD description (English source)

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.