CVE-2012-6703: Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA sub...

Security readout for executives and security teams

This is an old Linux kernel ALSA flaw where a local user could trigger bad memory sizing in compressed audio handling. The documented impact is denial of service, with unspecified other impact possible. It matters mainly for systems running very old or vendor-backported kernels that still contain the vulnerable code. Exposure is most plausible on Linux systems with old kernels or downstream kernels missing the referenced upstream fix. An attacker needs local ability to interact with ALSA compressed audio ioctl handling. Public affected-product data in the bundle is incomplete. Treat this as a hygiene and legacy-platform risk, not an emergency based on the supplied evidence. Prioritize patch verification on older Linux fleets, multi-user systems, and appliances using long-lived kernels. Mitigation focus: Update to a kernel containing upstream commit b35cc8225845112a616e3a2266d2fde5ab13d3ab or vendor backport.; Check Linux distribution advisories for the exact supported kernel package fix.; Prioritize shared systems where untrusted local users or workloads can access audio devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.