CVE-2026-46157
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
28/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger<br />
<br />
Currently the runtime.oss.trigger field may be accessed concurrently<br />
without protection, which may lead to the data race. And, in this<br />
case, it may lead to more severe problem because it&#39;s a bit field; as<br />
writing the data, it may overwrite other bit fields as well, which<br />
confuses the operation completely, as spotted by fuzzing.<br />
<br />
Fix it by covering runtime.oss.trigger bit fled also with the existing<br />
params_lock mutex in both snd_pcm_oss_get_trigger() and<br />
snd_pcm_oss_poll().



