CVE-2024-42274

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) FireWire subsystem. A local user could exploit this vulnerability to cause a Denial of Service (DoS) by triggering a complete system freeze. This issue occurs due to a deadlock condition where competing kernel processes contend for audio stream locks in reverse order during FireWire sound operations.

This vulnerability is rated as Moderate because exploitation requires local access and specialized IEEE 1394 (FireWire) audio hardware, limiting exposure on typical enterprise deployments. Although an unprivileged local account could induce a system lockup by triggering the deadlock condition, standard Red Hat Enterprise Linux server and cloud environments rarely attach or configure FireWire sound peripherals. Therefore, the practical risk is predominantly confined to workstation setups actively utilizing external FireWire audio equipment.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.