CVE-2025-23134

MEDIUM EPSS 2.2%
Published Apr 16, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 16, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The infamous mmap_lock taken in copy_from/to_user() can be often problematic when it's called inside another mutex, as they might lead to deadlocks. In the case of ALSA timer code, the bad pattern is with guard(mutex)(&register_mutex) that covers copy_from/to_user() -- which was mistakenly introduced at converting to guard(), and it had been carefully worked around in the past. This patch fixes those pieces simply by moving copy_from/to_user() out of the register mutex lock again.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-667

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥6.9  –  <6.12.23
linuxlinux_kernel*≥6.13  –  <6.13.11
linuxlinux_kernel*≥6.14  –  <6.14.2

References 4

  • git.kernel.org https://git.kernel.org/stable/c/15291b561d8cc835a2eea76b394070cf8e072771
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/296f7a9e15aab276db11206cbc1e2ae1215d7862
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3424c8f53bc63c87712a7fc22dc13d0cc85fb0d6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b074f47e55df93832bbbca1b524c501e6fea1c0d
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/15291b561d8cc835a2eea76b394070cf8e072771
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/296f7a9e15aab276db11206cbc1e2ae1215d7862
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3424c8f53bc63c87712a7fc22dc13d0cc85fb0d6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b074f47e55df93832bbbca1b524c501e6fea1c0d
    Patch