kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Google Inc. | Android | affected |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-754.3.5.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2018:2390 | 2018-08-14T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| kernel-rt-0:3.10.0-957.rt56.910.el7 | cpe:/a:redhat:rhel_extras_rt:7 | RHSA-2018:3096 | 2018-10-30T00:00:00Z |
| kernel-0:3.10.0-957.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3083 | 2018-10-30T00:00:00Z |
| Red Hat Enterprise Linux 7.5 Extended Update Support | |||
| kernel-0:3.10.0-862.46.1.el7 | cpe:/o:redhat:rhel_eus:7.5 | RHSA-2020:0036 | 2020-01-07T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1369-1 | linux security update |
Debian DSA |
DSA-4187-1 | linux security update |
EUVD |
EUVD-2017-1215 | Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. |
Ubuntu USN |
USN-3583-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3583-2 | Linux kernel (Trusty HWE) vulnerabilities |
Ubuntu USN |
USN-3617-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3617-2 | Linux (HWE) vulnerabilities |
Ubuntu USN |
USN-3617-3 | Linux kernel (Raspberry Pi 2) vulnerabilities |
Ubuntu USN |
USN-3619-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3619-2 | Linux kernel (Xenial HWE) vulnerabilities |
Ubuntu USN |
USN-3632-1 | Linux kernel (Azure) vulnerabilities |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.444% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.