In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix races among concurrent prealloc proc writes
We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).
[
{
"id": "CVE-2022-49288-0154b192",
"signature_version": "v1",
"digest": {
"function_hash": "207076651239233408747129676412507769273",
"length": 953.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14dca613e0a6ddc2bf6e360f16936a9f865205b",
"target": {
"file": "sound/core/pcm_memory.c",
"function": "snd_pcm_lib_preallocate_proc_write"
}
},
{
"id": "CVE-2022-49288-1f8c4725",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a21d2f323b5a978dedf9ff1d50f101f85e39b3f2",
"target": {
"file": "sound/core/pcm_memory.c"
}
},
{
"id": "CVE-2022-49288-34433fa0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6",
"target": {
"file": "sound/core/pcm_memory.c"
}
},
{
"id": "CVE-2022-49288-4db7f77f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14dca613e0a6ddc2bf6e360f16936a9f865205b",
"target": {
"file": "sound/core/pcm_memory.c"
}
},
{
"id": "CVE-2022-49288-4f5ed9c1",
"signature_version": "v1",
"digest": {
"function_hash": "207076651239233408747129676412507769273",
"length": 953.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37b12c16beb6f6c1c3c678c1aacbc46525c250f7",
"target": {
"file": "sound/core/pcm_memory.c",
"function": "snd_pcm_lib_preallocate_proc_write"
}
},
{
"id": "CVE-2022-49288-5e366f8f",
"signature_version": "v1",
"digest": {
"function_hash": "75852235146334440799509227167623358404",
"length": 1214.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69534c48ba8ce552ce383b3dfdb271ffe51820c3",
"target": {
"file": "sound/core/pcm_memory.c",
"function": "snd_pcm_lib_preallocate_proc_write"
}
},
{
"id": "CVE-2022-49288-7db9ad64",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"210694721792840699360272850109619154369",
"276708928395122399427651481113608355469",
"110741939538675519218933876130671538924",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69534c48ba8ce552ce383b3dfdb271ffe51820c3",
"target": {
"file": "sound/core/pcm_memory.c"
}
},
{
"id": "CVE-2022-49288-8ed49a21",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61702484308320130606982937863901500178",
"9093428598967861364380328268302381566",
"88692179064275653459763499802020441040",
"166738195214734107550816328956381269662",
"300517675183316959167435556323589390796",
"90955916527956329407959331360864929225",
"90302678851449605271505107261486319348",
"97432623419566771113312969499475967989",
"313935699555137793439255458651476203787",
"197778891110120308829485449609635488915",
"5606682196507429132772280546078846807",
"151519711545385905634488062845193486134",
"226482026309615453142530179147583441160",
"34719067946434532294069236385548471317",
"238632276203291670457482551431775957516",
"4993084818447642627607430005138281791",
"292094432124165471912543933514606094348",
"167166258313691422574219261806459786478",
"138670788480643180021019525075126433429",
"62955577263129925249689547140122161714",
"141475960996106642724826984536969899392",
"230998413736938671361979814998758064290",
"128520463961422716088471147238420914056",
"154125462650615131156807037404109848539"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37b12c16beb6f6c1c3c678c1aacbc46525c250f7",
"target": {
"file": "sound/core/pcm_memory.c"
}
},
{
"id": "CVE-2022-49288-c7aab386",
"signature_version": "v1",
"digest": {
"function_hash": "75852235146334440799509227167623358404",
"length": 1214.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a21d2f323b5a978dedf9ff1d50f101f85e39b3f2",
"target": {
"file": "sound/core/pcm_memory.c",
"function": "snd_pcm_lib_preallocate_proc_write"
}
},
{
"id": "CVE-2022-49288-d1b74089",
"signature_version": "v1",
"digest": {
"function_hash": "75852235146334440799509227167623358404",
"length": 1214.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6",
"target": {
"file": "sound/core/pcm_memory.c",
"function": "snd_pcm_lib_preallocate_proc_write"
}
}
]