Linux Kernel ALSA PCM Concurrent IOCTL Race Condition Vulnerability

A use-after-free vulnerability has been addressed in the Linux kernel's Advanced Linux Sound Architecture (ALSA) subsystem. This issue arose from a lack of proper checks and protections against concurrent calls to the PCM hardware parameters and hardware free IOCTLs. Such races could lead to a use-after-free condition. The vulnerability has been mitigated by introducing a new mutex, 'runtime->buffer_mutex', to safeguard these overlapping calls. The patch also slightly modifies the IOCTL functions for improved code simplicity.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.