In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix races among concurrent prealloc proc writes
We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14dca613e0a6ddc2bf6e360f16936a9f865205b",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-0154b192",
"signature_type": "Function",
"digest": {
"length": 953.0,
"function_hash": "207076651239233408747129676412507769273"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a21d2f323b5a978dedf9ff1d50f101f85e39b3f2",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-1f8c4725",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-34433fa0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14dca613e0a6ddc2bf6e360f16936a9f865205b",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-4db7f77f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37b12c16beb6f6c1c3c678c1aacbc46525c250f7",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-4f5ed9c1",
"signature_type": "Function",
"digest": {
"length": 953.0,
"function_hash": "207076651239233408747129676412507769273"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69534c48ba8ce552ce383b3dfdb271ffe51820c3",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-5e366f8f",
"signature_type": "Function",
"digest": {
"length": 1214.0,
"function_hash": "75852235146334440799509227167623358404"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b560d670c87d7d40b3cf6949246fa4c7aa65a00a",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-6a6ca224",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69534c48ba8ce552ce383b3dfdb271ffe51820c3",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-7db9ad64",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51fce708ab8986a9879ee5da946a2cc120f1036d",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-881b7318",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37b12c16beb6f6c1c3c678c1aacbc46525c250f7",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-8ed49a21",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a21d2f323b5a978dedf9ff1d50f101f85e39b3f2",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-c7aab386",
"signature_type": "Function",
"digest": {
"length": 1214.0,
"function_hash": "75852235146334440799509227167623358404"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-d1b74089",
"signature_type": "Function",
"digest": {
"length": 1214.0,
"function_hash": "75852235146334440799509227167623358404"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b560d670c87d7d40b3cf6949246fa4c7aa65a00a",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-dd75653d",
"signature_type": "Function",
"digest": {
"length": 999.0,
"function_hash": "149857123022593980889994864673610275324"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7786c445bb67a9a6e64f66ebd6b7215b153ff7d",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-e23ceae8",
"signature_type": "Function",
"digest": {
"length": 953.0,
"function_hash": "207076651239233408747129676412507769273"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51fce708ab8986a9879ee5da946a2cc120f1036d",
"target": {
"function": "snd_pcm_lib_preallocate_proc_write",
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-e3857e69",
"signature_type": "Function",
"digest": {
"length": 1198.0,
"function_hash": "306572236686945210678413132482091777293"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7786c445bb67a9a6e64f66ebd6b7215b153ff7d",
"target": {
"file": "sound/core/pcm_memory.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49288-e3c6f269",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
}
}
]