PT-2026-64712

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam disconnect cancels capture work and midi in work before usb kill anchored urbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers...

PT-2026-64710

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd ymfpci create spdif controls does not check the return value before dereferencing kctl-id.device, which can lead to a NU...

Linux Distros Unpatched Vulnerability : CVE-2026-64485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: compress: Fix task creation error unwind sndcomprtasknew allocates the driver task before validating the returned DMA buffers and reserving file...

Linux Distros Unpatched Vulnerability : CVE-2026-64491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs...

Linux Distros Unpatched Vulnerability : CVE-2026-64484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before...

PT-2026-64701

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. The ice1712 driver calls snd ctl new1 without checking the return value before dereferencing the pointer in multiple places...

Linux Distros Unpatched Vulnerability : CVE-2026-64482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before...

Linux Distros Unpatched Vulnerability : CVE-2026-64487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser sndusbcaiaqtks4dispatch decodes the Traktor Kontrol S4 input stream in fixed 16-byte...

PT-2026-64699

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match The DualSense jack-detection input handler verifies that a matching input device belongs to the same physical controller by building kobject path strings for both the...

PT-2026-64703

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd gf1 pcm volume control does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-64490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device- provided control type and value count returned by the...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return valu...

PT-2026-64705

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd es1938 mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-64479

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the...

Linux Distros Unpatched Vulnerability : CVE-2026-64480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the...

Linux Distros Unpatched Vulnerability : CVE-2026-64488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value befo...

AlmaLinux 9 : sssd (ALSA-2026:42122)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42122 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd: G...

AlmaLinux 10 : kernel (ALSA-2026:42919)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

AlmaLinux 9 : java-1.8.0-openjdk (ALSA-2026:42877)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42877 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK: Enhance...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...