Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2016-9794 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2016-9794

CVE-2016-9794

HIGH7.8

Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib

Published Dec 28, 2016

Modified 1 years ago

Details

Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html

http://rhn.redhat.com/errata/RHSA-2016-2574.html

http://www.openwall.com/lists/oss-security/2016/12/03/2

http://www.securityfocus.com/bid/94654

https://bugzilla.redhat.com/show_bug.cgi?id=1401494

https://github.com/torvalds/linux/commit/3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4

https://patchwork.kernel.org/patch/8752621/

https://source.android.com/security/bulletin/2017-05-01

https://www.cve.org/CVERecord?id=CVE-2016-9794

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedDec 28, 2016

ModifiedAug 6, 2024