Linux Kernel ALSA PCM OSS Layer Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Pulse Code Modulation (PCM) Open Sound System (OSS) layer. This vulnerability arises during the initialization or reconfiguration of a stream, where the PCM OSS layer attempts to clear the buffer by inserting silence data. The issue occurs because the buffer's memory area can be freed concurrently, leading to a race condition. The vulnerability has been addressed by moving the buffer-clearing operation into the PCM core and synchronizing it with the buffer access lock, preventing concurrent modifications during the process.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.