Vulnerability of the sound module/soc/mediatek/mt8195/mt8195-mt6359.c: support for audio in Linux operating system SoCs, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sound module/soc/mediatek/mt8195/mt8195-mt6359.c in Linux operating system SoCs is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

[SECURITY] Fedora 44 Update: mac-12.50-1.fc44

Monkey's Audio is a fast and easy way to compress digital music. Unlike traditional methods such as mp3, ogg, or lqt that permanently discard quality to save space, Monkey's Audio only makes perfect, bit-for-bit copies of your music. That means it always sounds perfect =E2=80=93 exactly t he same...

The vulnerability of the snd_pcm_oss_sync() function in the sound/core/oss/pcm_oss.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sndpcmosssync function in the sound/core/oss/pcmoss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-31884

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In libfreerdp/codec/dsp.c, both ADPCM decoders use size % blocksize where blocksize = context-common.format.nBlockAlign...

TencentOS Server 4: qemu (TSSA-2026:0167)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0167 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the snd_pcm_lib_free_pages() function in the sound/core/pcm_memory.c module allows a hacker to cause a service failure in Linux-based systems.

The vulnerability of the sndpcmlibfreepages function in the sound/core/pcmmemory.c module, which is part of Linux’s kernel-based audio card support, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

[SECURITY] Fedora 43 Update: SDL3_sound-3.0.0~20260117gitb00e4a3-1.fc43

SDLsound is a library that handles the decoding of several popular sound file formats, such as .WAV and .OGG. It is meant to make the programmer's sound playback tasks simpler. The programmer gives SDLsound a filename, or feeds it data directly from one of many sources, and then reads the decoded...

[SECURITY] Fedora 43 Update: SDL2_sound-2.0.5^20260117git1be041b-1.fc43

SDLsound is a library that handles the decoding of several popular sound file formats, such as .WAV and .OGG. It is meant to make the programmer's sound playback tasks simpler. The programmer gives SDLsound a filename, or feeds it data directly from one of many sources, and then reads the decoded...

[SECURITY] Fedora 44 Update: SDL2_sound-2.0.5^20260117git1be041b-1.fc44

SDLsound is a library that handles the decoding of several popular sound file formats, such as .WAV and .OGG. It is meant to make the programmer's sound playback tasks simpler. The programmer gives SDLsound a filename, or feeds it data directly from one of many sources, and then reads the decoded...

Fedora 44 : SDL3_sound (2026-c8cb37d552)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c8cb37d552 advisory. Latest snapshot from 3.0 branch. Fixes CVE-2025-14369. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 44 : SDL2_sound (2026-9b4cb66a86)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b4cb66a86 advisory. Latest upstream snapshot from stable-2.0 branch. Fixes CVE-2025-14369 in bundled drflac. Tenable has extracted the preceding description block directly from...

The vulnerability of the sound/soc/intel/avs component in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sound/soc/intel/avs component in Linux operating systems is related to the dereferencing of a pointer with an expired reference count. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the snd_usbmidi_free() function in the sound/usb/midi.c module allows for exploitation by attackers, causing a service failure. This vulnerability exposes USB audio devices supported by Linux operating systems.

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2026-1773047152 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

Fedora 45 : SDL3_sound (2026-6887ad5a22)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6887ad5a22 advisory. Automatic update for SDL3sound-3.0.020260117gitb00e4a3-1.fc45. Changelog Thu Mar 5 2026 Dominik 'Rathann' Mierzejewski - 3.0.020260117gitb00e4a3-1 - update t...

The vulnerability of the add_widget_node() function in the sound/hda/hdac_sysfs.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the addwidgetnode function in the sound/hda/hdacsysfs.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005701 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocate...

CVE-2024-43035

Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice/src/utils.ts. NOTE: serveFiles exists in 0.5.5 but not in the next release, 0.6.1...

UBUNTU-CVE-2026-3195

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...

CVE-2026-3195

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...