ZeroDay Findings
Sign inSign up

Findings

CVE-2023-0266

Linux Kernel Use-After-Free Vulnerability

Published Jan 30, 2023 · updated Jun 16, 2026 · debian debian linux

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 30, 2023 · Catalog

    Detected

    A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

  2. Mar 30, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 20, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

Required action

Apply updates per vendor instructions.

CISA due date Apr 20, 2023

Affected

  • cpe debian/debian linux10.0
  • cpe linux/linux kernelversion unspecified
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2023-0266

    Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2023-0266

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-0266

    30-day exploitation probability 3.7%

    first.org
  • NIST NVDVulnerability recordCVE-2023-0266

    A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgradin

    nvd.nist.gov

References