THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-26654 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer could schedule the spu_dma_work and the spu_dma_work could also arm the dreamcastcard->timer. When the snd_pcm_substream is

[NVD] CVE-2024-26654 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer could schedule the spu_dma_work and the spu_dma_work could also arm the dreamcastcard->timer. When the snd_pcm_substream is

lownvdPublished 2024-04-01

CVE-2024-26654 CVSS: 7.8 HIGH Published: 2024-04-01T09:15:51.063

In the Linux kernel, the following vulnerability has been resolved:

ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs

The dreamcastcard->timer could schedule the spu_dma_work and the spu_dma_work could also arm the dreamcastcard->timer.

When the snd_pcm_substream is closing, the aica_channel will be deallocated. But it

Indicators of compromise

CVE-2024-26654cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26654