Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-46157

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
28/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger<br /> <br /> Currently the runtime.oss.trigger field may be accessed concurrently<br /> without protection, which may lead to the data race. And, in this<br /> case, it may lead to more severe problem because it&amp;#39;s a bit field; as<br /> writing the data, it may overwrite other bit fields as well, which<br /> confuses the operation completely, as spotted by fuzzing.<br /> <br /> Fix it by covering runtime.oss.trigger bit fled also with the existing<br /> params_lock mutex in both snd_pcm_oss_get_trigger() and<br /> snd_pcm_oss_poll().

Impacto