CVE-2022-3303
Summary
| CVE | CVE-2022-3303 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-09-27 23:15:00 UTC |
|---|
| Updated | 2023-11-07 03:51:00 UTC |
|---|
| Description | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| A new null-ptr-deref Write bug in snd_pcm_format_set_silence - butt3rflyh4ck |
MISC |
lore.kernel.org |
|
| A new null-ptr-deref Write bug in snd_pcm_format_set_silence - butt3rflyh4ck |
|
lore.kernel.org |
|
| Debian -- Security Information -- DSA-5257-1 linux |
DEBIAN |
www.debian.org |
|
| [SECURITY] [DLA 3173-1] linux-5.10 security update |
MLIST |
lists.debian.org |
|
| kernel/git/torvalds/linux.git - Linux kernel source tree |
MISC |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160458 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12117)
- 160461 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12118)
- 181145 Debian Security Update for linux (DSA 5257-1)
- 181190 Debian Security Update for linux-5.10 (DLA 3173-1)
- 183043 Debian Security Update for linux (CVE-2022-3303)
- 199087 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5792-1)
- 199088 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5791-1)
- 199089 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5793-1)
- 199091 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5791-2)
- 199094 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5792-2)
- 199096 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5793-2)
- 199098 Ubuntu Security Notification for Linux kernel (IBM) Vulnerabilities (USN-5793-4)
- 199099 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5793-3)
- 199100 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5791-3)
- 199119 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-5815-1)
- 199179 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5877-1)
- 199334 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6071-1)
- 199560 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-6001-1)
- 199568 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-6013-1)
- 199577 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6014-1)
- 199615 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6252-1)
- 354082 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-008
- 354098 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-037
- 354439 Amazon Linux Security Advisory for kernel : ALAS2022-2022-150
- 354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
- 354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 378468 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-20230042)
- 378512 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0042)
- 6140417 AWS Bottlerocket Security Update for kernel (GHSA-gj29-w9m9-pj7h)
- 672454 EulerOS Security Update for kernel (EulerOS-SA-2022-2848)
- 672474 EulerOS Security Update for kernel (EulerOS-SA-2022-2823)
- 672495 EulerOS Security Update for kernel (EulerOS-SA-2023-1012)
- 672516 EulerOS Security Update for kernel (EulerOS-SA-2023-1037)
- 752668 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3586-1)
- 752669 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3587-1)
- 752671 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3584-1)
- 752700 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3688-1)
- 752702 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3693-1)
- 752708 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3704-1)
- 752724 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3775-1)
- 752750 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3844-1)
- 753063 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4617-1)
- 753095 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3585-1)
- 753370 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3609-1)
- 753374 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3809-1)
- 753703 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753707 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753727 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 904064 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11054)
- 904067 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11048)
- 904258 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11048-1)
- 904382 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11054-1)
- 905808 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11054-2)
- 906308 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11048-2)
