https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:15:44 +0000 https://cve.radiocsirt.org/vuln/cve-2022-49291 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: pcm: Fix races among concurrent hw_params and hw_free calls</p> <p>Currently we have neither proper check nor protection against the concurrent calls of PCM hw_params and hw_free ioctls, which may result in a UAF. Since the existing PCM stream lock can&#39;t be used for protecting the whole ioctl operations, we need a new mutex to protect those racy calls.</p> <p>This patch introduced a new mutex, runtime-&gt;buffer_mutex, and applies it to both hw_params and hw_free ioctl code paths. Along with it, the both functions are slightly modified (the mmap_count check is moved into the state-check block) for code simplicity.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: pcm: Fix races among concurrent hw_params and hw_free calls</p> <p>Currently we have neither proper check nor protection against the concurrent calls of PCM hw_params and hw_free ioctls, which may result in a UAF. Since the existing PCM stream lock can&#39;t be used for protecting the whole ioctl operations, we need a new mutex to protect those racy calls.</p> <p>This patch introduced a new mutex, runtime-&gt;buffer_mutex, and applies it to both hw_params and hw_free ioctl code paths. Along with it, the both functions are slightly modified (the mmap_count check is moved into the state-check block) for code simplicity.</p> https://cve.radiocsirt.org/vuln/cve-2022-49291