CVE-2022-1048: Use After Free
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hwparams. The hwfree ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Other sources
In sndpcmhwfree it seems like that the function calls the unlock too early, this may lead to a race condition and use-after-free.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-425.3.1.rt7.213.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-425.3.1.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-162.6.1.el9_1 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-162.6.1.rt21.168.el9_1 - Upgrade
Upgrade
redhat/Linux kernelto a version that resolves this vulnerability.Fixed in 5.17 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Compensating control
Prevent the ALSA PCM module from being loaded by blacklisting the kernel module snd-pcm, so it does not auto-load (per the referenced Red Hat guidance for how to blacklist modules).
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1048?
CVE-2022-1048 is considered a high severity vulnerability due to its potential to allow local users to crash the system or escalate privileges.
How do I fix CVE-2022-1048?
To mitigate CVE-2022-1048, update to the patched kernel versions specified for your distribution.
Which versions of the Linux kernel are affected by CVE-2022-1048?
CVE-2022-1048 affects Linux kernel versions between 2.6.12 and 5.17, with specific ranges depending on your distribution.
Does CVE-2022-1048 affect Red Hat Enterprise Linux?
Yes, CVE-2022-1048 affects various versions of Red Hat Enterprise Linux kernel packages, including kernel-rt and kernel.
Can CVE-2022-1048 be exploited remotely?
CVE-2022-1048 does not appear to be exploitable remotely as it requires local user access.