{"id":"DEBIAN-CVE-2023-54072","details":"In the Linux kernel, the following vulnerability has been resolved:  ALSA: pcm: Fix potential data race at PCM memory allocation helpers  The PCM memory allocation helpers have a sanity check against too many buffer allocations.  However, the check is performed without a proper lock and the allocation isn't serialized; this allows user to allocate more memories than predefined max size.  Practically seen, this isn't really a big problem, as it's more or less some \"soft limit\" as a sanity check, and it's not possible to allocate unlimitedly.  But it's still better to address this for more consistent behavior.  The patch covers the size check in do_alloc_pages() with the card-\u003ememory_mutex, and increases the allocated size there for preventing the further overflow.  When the actual allocation fails, the size is decreased accordingly.","modified":"2026-09-15T08:47:29.578214742Z","published":"2025-12-24T13:16:09.050Z","upstream":["CVE-2023-54072"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-54072"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.52-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54072.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54072.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54072.json"}}],"schema_version":"1.9.0"}