CVE-2023-0266
🔥 Known Exploited (CISA KEV)HIGH
7.9
CVSS Severity Score
Vulnerability Description
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
Affected Platforms (CPE)
💻
Debian
Debian Linux
= 10.0
💻
Linux
Linux Kernel
>= 4.14 and < 4.14.303>= 4.15 and < 4.19.270>= 4.20 and < 5.4.229>= 5.5 and < 5.10.163>= 5.11 and < 5.15.88>= 5.16 and < 6.1.6