The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8…

Published 19 y ago 2007-09-26 · modified 4 mo ago 2026-06-16 · JSON

CVSS

2.1

v2.0 · NVD

CISA KEV

not known exploited

EPSS

0.8%

percentile 56%

Public exploits

Exploit-DB

The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.

Exploit prediction (EPSS)

0.76% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

EDB-30605 Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure · local · 2007-09-21

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	2.1	`AV:L/AC:L/Au:N/C:P/I:N/A:N`

Classification

Technology feeds: Linux kernel (RSS, critical only)

References

secunia.com /advisories/27747 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/27227 · third-party-advisory, x_refsource_SECUNIA, x_transferred
novell.com /linux/security/advisories/2007_53_kernel.html · vendor-advisory, x_refsource_SUSE, x_transferred
git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a31 · x_refsource_CONFIRM, x_transferred
securitytracker.com /id?1018734 · vdb-entry, x_refsource_SECTRACK, x_transferred
ubuntu.com /usn/usn-618-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
redhat.com /support/errata/RHSA-2007-0939.html · vendor-advisory, x_refsource_REDHAT, x_transferred
vupen.com /english/advisories/2007/3272 · vdb-entry, x_refsource_VUPEN, x_transferred
secunia.com /advisories/28626 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/29054 · third-party-advisory, x_refsource_SECUNIA, x_transferred
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9053 · vdb-entry, signature, x_refsource_OVAL, x_transferred
debian.org /security/2008/dsa-1479 · vendor-advisory, x_refsource_DEBIAN, x_transferred
redhat.com /archives/fedora-package-announce/2007-September/msg00436.html · vendor-advisory, x_refsource_FEDORA, x_transferred
secunia.com /advisories/27824 · third-party-advisory, x_refsource_SECUNIA, x_transferred
securityfocus.com /bid/25807 · vdb-entry, x_refsource_BID, x_transferred
secunia.com /advisories/26989 · third-party-advisory, x_refsource_SECUNIA, x_transferred
support.avaya.com /elmodocs2/security/ASA-2007-474.htm · x_refsource_CONFIRM, x_transferred
kernel.org /pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 · x_refsource_CONFIRM, x_transferred
redhat.com /support/errata/RHSA-2007-0993.html · vendor-advisory, x_refsource_REDHAT, x_transferred
issues.rpath.com /browse/RPL-1761 · x_refsource_CONFIRM, x_transferred
secunia.com /advisories/26980 · third-party-advisory, x_refsource_SECUNIA, x_transferred
debian.org /security/2008/dsa-1505 · vendor-advisory, x_refsource_DEBIAN, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/36780 · vdb-entry, x_refsource_XF, x_transferred
labs.idefense.com /intelligence/vulnerabilities/display.php?id=600 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
secunia.com /advisories/30769 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/27101 · third-party-advisory, x_refsource_SECUNIA, x_transferred
redhat.com /archives/fedora-package-announce/2007-October/msg00083.html · vendor-advisory, x_refsource_FEDORA, x_transferred
secunia.com /advisories/27436 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/26918 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

CVE List: CVE-2007-4571
NVD: CVE-2007-4571

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.