CVE-2022-49733: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49733 affects the Linux kernel's ALSA (Advanced Linux Sound Architecture) PCM OSS (Open Sound System) subsystem. The vulnerability was discovered in 2022 and involves a race condition in the snd_pcm_oss_sync() function that is called from the OSS PCM SNDCTL_DSP_SYNC ioctl. The issue affects Linux kernel versions from 5.5 through 5.10.148, 5.16 through 5.19.9, and 6.0 release candidates (NVD).

The vulnerability stems from a race condition in the snd_pcm_oss_sync() function. Specifically, the function calls snd_pcm_oss_make_ready() before acquiring the params_lock mutex. This creates a race window where if another thread sets up the stream between these operations, it can lead to inconsistency. The vulnerability has been assigned a CVSS v3.1 base score of 4.7 (Medium), with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can result in unexpected behavior, including a NULL pointer dereference of the OSS buffer. This could potentially lead to system crashes or denial of service conditions (Kernel Patch).

The vulnerability requires local access and complex timing conditions to exploit, as indicated by the CVSS metrics showing Local access (AV:L) and High attack complexity (AC:H). A fuzzer was able to identify the issue, suggesting that while exploitation is possible, it requires specific conditions to be met (Red Hat).

The vulnerability has been fixed by modifying the snd_pcm_oss_sync() function to use snd_pcm_oss_make_ready_locked() variant, which ensures that the make_ready operation is performed while holding the params_lock mutex. This fix has been implemented in various kernel versions through patches (Kernel Patch).