« List of all CVEs

CVE-2023-52689

ALSA: scarlett2: Add missing mutex lock around get meter levels

Published: 5/17/2024 Last updated: 5/4/2025 Reserved: 3/7/2024

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing mutex lock around get meter levels As scarlett2_meter_ctl_get() uses meter_level_map[], the data_mutex should be locked while accessing it.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (10)

conf-bpftool conf-libbpf conf-linux-libc-dev hvsock mirage-block-unix solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm

Products affected (2)

Product Vendor Version
Linux Linux all versions
Linux Linux Java SE:8u301

References (4)