In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory allocation helpers have a sanity check against too many buffer allocations. However, the check is performed without a proper lock and the allocation isn't serialized; this allows user to allocate more memories than predefined max size. Practically seen, this isn't really a big problem, as it's more or less some "soft limit" as a sanity check, and it's not possible to allocate unlimitedly. But it's still better to address this for more consistent behavior. The patch covers the size check in do_alloc_pages() with the card->memory_mutex, and increases the allocated size there for preventing the further overflow. When the actual allocation fails, the size is decreased accordingly.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/3eb4e47a94e3f76521d7d344696db61e6a9619c7 cve-icon cve-icon
https://git.kernel.org/stable/c/773ccad902f67583a58b5650a2f8d8daf2e76fac cve-icon cve-icon
https://git.kernel.org/stable/c/7e11c58b2620a22c67a5ae28d64ce383890ee9f4 cve-icon cve-icon
https://git.kernel.org/stable/c/7e1d1456c8db9949459c5a24e8845cfe92430b0f cve-icon cve-icon
https://git.kernel.org/stable/c/a0ab49e7a758b488b2090171a75d50735c0876f6 cve-icon cve-icon
https://git.kernel.org/stable/c/bd55842ed998a622ba6611fe59b3358c9f76773d cve-icon cve-icon
History

Wed, 24 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory allocation helpers have a sanity check against too many buffer allocations. However, the check is performed without a proper lock and the allocation isn't serialized; this allows user to allocate more memories than predefined max size. Practically seen, this isn't really a big problem, as it's more or less some "soft limit" as a sanity check, and it's not possible to allocate unlimitedly. But it's still better to address this for more consistent behavior. The patch covers the size check in do_alloc_pages() with the card->memory_mutex, and increases the allocated size there for preventing the further overflow. When the actual allocation fails, the size is decreased accordingly.
Title ALSA: pcm: Fix potential data race at PCM memory allocation helpers
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-24T12:23:15.552Z

Updated: 2025-12-24T12:23:15.552Z

Reserved: 2025-12-24T12:21:05.093Z

Link: CVE-2023-54072

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-24T13:16:09.050

Modified: 2025-12-24T13:16:09.050

Link: CVE-2023-54072

cve-icon Redhat

No data.