CVE-2022-49733

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Linux kernel's ALSA pcm oss component. The issue occurs in the snd pcm oss sync() function, which is called from the OSS PCM SNDCTL DSP SYNC ioctl. This function first calls snd pcm oss make ready(), then takes the params lock mutex. If the stream is set up again by another thread between these two operations, it can lead to inconsistency and potentially result in unexpected behavior, such as a NULL dereference of the OSS buffer.

Recommendations To resolve this issue, apply the fix that covers the snd pcm oss make ready() call with the snd pcm oss make ready locked() variant within the same params lock mutex.