CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-01-30
Linux Kernel ALSA PCM Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-0266) Analysis and Mitigation Guide
[Affected Scope] Systems running Linux Kernel utilizing the ALSA (Advanced Linux Sound Architecture) PCM subsystem
[Impact] A local attacker can trigger a Use-After-Free (UAF) condition to corrupt kernel memory, leading to complete system compromise with Ring 0 privileges
[Mitigation] Upgrade the Linux kernel past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e, or blacklist the vulnerable sound modules