Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-49733— ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

EPSS 0.04% · P11

Affected Version Matrix 12

VendorProductVersion RangeStatus
LinuxLinuxe3a5d59a17e9a42e3f3e0e37342b2679bab2ff43< 4051324a6dafd7053c74c475e80b3ba10ae672b0affected
e3a5d59a17e9a42e3f3e0e37342b2679bab2ff43< fce793a056c604b41a298317cf704dae255f1b36affected
e3a5d59a17e9a42e3f3e0e37342b2679bab2ff43< 8015ef9e8a0ee5cecfd0cb6805834d007ab26f86affected
e3a5d59a17e9a42e3f3e0e37342b2679bab2ff43< 723ac5ab2891b6c10dd6cc78ef5456af593490ebaffected
e3a5d59a17e9a42e3f3e0e37342b2679bab2ff43< 8423f0b6d513b259fdab9c9bf4aaa6188d054c2daffected
2.6.20affected
< 2.6.20unaffected
5.4.215≤ 5.4.*unaffected
… +4 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-49733

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_sync() that is called from OSS PCM SNDCTL_DSP_SYNC ioctl; namely the function calls snd_pcm_oss_make_ready() at first, then takes the params_lock mutex for the rest. When the stream is set up again by another thread between them, it leads to inconsistency, and may result in unexpected results such as NULL dereference of OSS buffer as a fuzzer spotted recently. The fix is simply to cover snd_pcm_oss_make_ready() call into the same params_lock mutex with snd_pcm_oss_make_ready_locked() variant.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于OSS PCM SNDCTL_DSP_SYNC ioctl中的竞争条件，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux e3a5d59a17e9a42e3f3e0e37342b2679bab2ff43 ~ 4051324a6dafd7053c74c475e80b3ba10ae672b0 -
LinuxLinux 2.6.20 -

II. Public POCs for CVE-2022-49733

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-49733

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-49733

No comments yet

Leave a comment