CVE-2026-80972

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

CVE-2026-80943

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92dutxfilldesc uses ieee80211gettid to read the QoS TID from the 802.11 header and then uses it as an index into staentry-tids. ieee80211gettid returns the low 4-bit...

CVE-2026-89615 fs/ntfs3: bound page_lcns[] index by the log record

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound pagelcns index by the log record The copylcns loop and the redo shorten loop index pagelcns at j + i, where i runs up to the log record's lcnsfollow. That count is checked only against the record's own length, not...

CVE-2026-89525 udf: reject VAT indexes equal to the entry count

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

CVE-2026-89492

CVE-2026-89492 is a slab out-of-bounds read in the Linux kernel's OCFS2 filesystem. The functions ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() fail to bound the ocfs2_dx_entry_list counts against the 4 KB block capacity. As a result, ocfs2_dx_dir_search() can walk up to 0xffff entries pa...

CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

CVE-2026-80972 ALSA: aloop: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

EUVD-2026-76295

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

CVE-2026-80972 ALSA: aloop: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

CVE-2026-80972

This vulnerability affects the ALSA aloop driver in the Linux kernel . The driver blindly trusts the devptr->id value as a valid card index at probe time. While this is safe for devices created during module probe, if a device is bound manually via the sysfs interface , the index can be -1 ("n...

CVE-2026-80969 ALSA: mpu401: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

EUVD-2026-76292

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80969 ALSA: mpu401: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80969

CVE-2026-80969 affects the Linux kernel 's ALSA mpu401 driver. At probe time, the driver blindly trusts the devptr->id value as a valid card index. While this is safe for devices created during normal module probe, if a device is bound manually via sysfs , the value can be -1 ("none"), leading...

CVE-2026-80968

CVE-2026-80968 affects the ALSA mts64 driver in the Linux kernel . The driver validates the card index (devptr->id) but fails to reject negative values , which can occur when the device is bound via sysfs with an unrecognized identifier (e.g., "none"). This lack of validation permits an out-of...

CVE-2026-80968 ALSA: mts64: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

EUVD-2026-76291

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

CVE-2026-80968 ALSA: mts64: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

CVE-2026-80966 ALSA: portman2x4: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This...