A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 27, 2022 · NIST NVD

   Detected

   A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

2. Oct 14, 2026 · NIST NVD

   Updated

   A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Affected

• cpe debian/debian linux10.0
• cpe debian/debian linux11.0
• cpe linux/linux kernelversion unspecified
• cpe linux/linux kernel6.0

Sources

• CVE.orgVulnerability recordCVE-2022-3303

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2022-3303

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2022-3303

  A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system,

  nvd.nist.gov

References

• Exploit · git.kernel.org
• Mailing List · lists.debian.org
• Reference · lore.kernel.org
• Third Party Advisory · debian.org