CVE-2014-4653: Canonical Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Linux Linux Kernel: before 3.15.2 (fixed in 3.15.2)
• Suse Linux Enterprise Server: version 10 only

Published 2014-07-03. Last modified 2026-06-17.