VYPR
High severity7.8NVD Advisory· Published Feb 26, 2025· Updated Jun 17, 2026

CVE-2022-49288

CVE-2022-49288

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Fix races among concurrent prealloc proc writes

We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the PCM open_mutex to the proc write operation for avoiding the racy proc writes and the PCM stream open (and further operations).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

145

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.