UBUNTU-CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

EUVD-2026-93194

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98266

The Linux kernel contains a use-after-free vulnerability in the ALSA core component. The issue occurs when a sound card is released asynchronously via snd_card_free_when_closed(), such as in USB-audio drivers . While snd_card_disconnect() gates new accesses, in-flight tasks may still access the u...

CVE-2026-98266 ALSA: core: Fix potential UAF after asynchronous card release

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98265 ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so urb-isoframedesc has u-packets slots and ctx-packets is the driver's only...

CVE-2026-98265 ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so urb-isoframedesc has u-packets slots and ctx-packets is the driver's only...

CVE-2026-98265

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so urb-isoframedesc has u-packets slots and ctx-packets is the driver's only...

EUVD-2026-93193

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so urb-isoframedesc has u-packets slots and ctx-packets is the driver's only...

CVE-2026-98265

The Linux kernel contains a vulnerability in the ALSA usb-audio driver where the data_ep_set_params() function allocates data URB memory based on u->packets. However, for implicit feedback sinks, snd_usb_queue_pending_output_urbs() may overwrite this limit with a larger count from the sync sou...

Linux Distros Unpatched Vulnerability : CVE-2026-98265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so...

PT-2026-107096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Audio component. A remote attacker who has already compromised the renderer process can read memory outside the sandbox by using a specially crafted...

CVE-2026-106424: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-98266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it...

PT-2026-106594

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data ep set params allocates each data URB for exactly u-packets isochronous frames, so urb-iso frame desc has u-packets slots and ctx-packets is the driver's...

CVE-2026-98265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity dataepsetparams allocates each data URB for exactly u-packets isochronous frames, so urb-isoframedesc has u-packets slots and ctx-packets is the driver's only...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791305177)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791305177 advisory. - Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-100805

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Audio/Video component...

wpair-app

WPair Scanner di vulnerabilità e strumento di ricerca per CVE-2025-36911 ad es. WhisperPair Funzionalità • Installazione • Utilizzo • Come funziona • Vulnerabilità • Crediti Disclaimer Questa applicazione è un'implementazione indipendente creata da @ZalexDev a titolo personale. I ricercatori...

CVE-2026-98092

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA AMD audio driver. This vulnerability can lead to a Denial of Service DoS due to a memory leak when closing audio capture streams. A local user could exploit this flaw by repeatedly opening and closing the affected audio...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fixed the bounds check for sx controls. For sx controls, the semantics of the max field are not the usual one; max represents the number of steps, rather than the maximum value. This means that our check in...