CVE-2026-46157
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
30/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger<br />
<br />
Currently the runtime.oss.trigger field may be accessed concurrently<br />
without protection, which may lead to the data race. And, in this<br />
case, it may lead to more severe problem because it&#39;s a bit field; as<br />
writing the data, it may overwrite other bit fields as well, which<br />
confuses the operation completely, as spotted by fuzzing.<br />
<br />
Fix it by covering runtime.oss.trigger bit fled also with the existing<br />
params_lock mutex in both snd_pcm_oss_get_trigger() and<br />
snd_pcm_oss_poll().
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH