NetSight
high7.8

CVE-2016-9794

Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause …

Impact

Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.85
from 3.3 before 3.10.105
from 3.11 before 3.12.69
from 3.13 before 3.16.40
from 3.17 before 3.18.52
from 3.19 before 4.4.37

Weakness classification

References