CVE-2022-1048

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416 CWE-362

Affected software

Vendor	Product	Versions
n/a	kernel	Linux kernel 5.17-rc9

References

https://bugzilla.redhat.com/show_bug.cgi?id=2066706Issue Tracking, Third Party Advisory
https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3Mailing List, Patch
https://security.netapp.com/advisory/ntap-20220629-0001/Third Party Advisory
https://www.debian.org/security/2022/dsa-5127Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2066706Issue Tracking, Third Party Advisory
https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3Mailing List, Patch
https://security.netapp.com/advisory/ntap-20220629-0001/Third Party Advisory
https://www.debian.org/security/2022/dsa-5127Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory

Timeline

Published: Apr 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10498.8A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired password CVE-2022-10508.8A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW comma CVE-2022-10515.4The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the c CVE-2022-10525.5Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-10539.1Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and t CVE-2022-10545.3The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and ha CVE-2022-10557.8A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit re CVE-2022-10565.5Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that CVE-2022-10579.8The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a S CVE-2022-10586.1Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.CVE-2022-10596.1Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user crede CVE-2022-10617.5Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.