CVE-2014-4652 — Race Condition in Kernel

CWE-362 — Race Condition13 documents8 sources
Severity
1.9LOWNVD
EPSS
0.1%
top 84.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Linux KernelCanonical Ubuntu LinuxRedhat Enterprise Linux Desktop+3 more
Timeline
PublishedJul 3
Latest updateMay 13

Description

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages6 packages

▶NVDlinux/linux_kernel< 3.15.2
▶Debianlinux/linux_kernel< 3.14.9-1+3

Also affects: Ubuntu Linux 12.04

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7r3g-2r6j-pg45: Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control↗2022-05-13
▶
CVEList
CVE-2014-4652: Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control↗2014-07-03
▶
OSV
CVE-2014-4652: Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control↗2014-07-03
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel (EC2) vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel vulnerabilities↗2014-09-02
▶

💬Community

1
Bugzilla
CVE-2014-4652 Kernel: ALSA: control: protect user controls against races & memory disclosure↗2014-06-26
▶
CVE-2014-4652 — Race Condition in Linux Kernel | cvebase