CVE-2022-49288

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49288
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49288.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49288
Downstream
Related
Published
2025-02-26T07:01:05Z
Modified
2025-08-09T20:01:28Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Fix races among concurrent prealloc proc writes

We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).

References

Affected packages