← Database

CVE-2022-1048

HIGH CVSS: 7.0 Published: 2022-04-29 Modified: 2026-06-17

Description

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected Platforms

Netapp H300S FirmwareDebian Debian LinuxNetapp H700E FirmwareLinux Linux KernelNetapp H700SNetapp H410SNetapp H410S FirmwareNetapp H300SNetapp H410C FirmwareNetapp H500S

Weakness Type

CWE-416, CWE-362, CWE-416

References