CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — alsa-lib OOB Write Reproducer Standalone C reproducer for CVE-2026-90781 , a 1-byte out-of-bounds write in alsa-lib's sndctlasciielemidparse when parsing name= both quoted and unquoted forms. Vulnerability In src/control/ctlparse.c v1.2.16.1 and earlier development HEAD: char...

claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

kernel: ALSA: usx2y: bound the hwdep mmap fault offset

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

CVE-2026-98912

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem. An inverted buffer size check in the OSS Open Sound System sequencer read handler allows a local user to cause memory corruption. Because the kernel checks buffer bounds incorrectly, it copies event data into...

K000164033: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...

kernel: ALSA: usx2y: bound the hwdep mmap fault offset

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A lack of serialization in the userspace-driven timer utimer TRIGGER ioctl allows two threads to concurrently call sndtimerinterrupt. This race condition can lead to a use-after-free vulnerability, wher...

kernel: ALSA: virtio: Validate control metadata from the device

A flaw was found in the Linux kernel's ALSA virtio sound driver. A malicious or buggy virtio device can provide invalid control metadata, such as an unknown control type or an oversized value count. The driver's control handling trusts this unvalidated metadata, leading to out-of-bounds access wh...

kernel: ALSA: usx2y: bound the hwdep mmap fault offset

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146289 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, th...

Linux Distros Unpatched Vulnerability : CVE-2026-98912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Reject reads that cannot fit the next event sndseqossread checks whether the next queued OSS sequencer event fits in the remaining userspace...

Oracle Linux 9 : kernel (ELSA-2026-87805)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87805 advisory. - xfs: bounds-check buffer log item's dirty bitmap Pavel Reichl RHEL-253366 CVE-2026-80536 - ovl: check access to copyfilerange source with src mounte...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

CVE-2026-99068

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA ctxfi driver. When clearing Digital Audio Output DAO input mapping entries, the driver fails to properly free allocated memory. A local user could exploit this vulnerability by repeatedly triggering the operation, causi...

CLSA-2026-1792981530 Fix of 55 CVEs

CVE-2026-98706 - wifi: mac80211: drain PS delivery work during station teardown CVE-2026-98706 CVE-2026-98836 - ALSA: line6: reject oversized playback packets CVE-2026-98836 CVE-2026-98548 - sctp: discard the rest of the packet on a stale-cookie error CVE-2026-98548 CVE-2026-98614 - sctp: avoid...

Linux Distros Unpatched Vulnerability : CVE-2026-99068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ALSA: ctxfi: Simplify daoclearleft,rightinput functions centralized the DAO...

MiracleLinux 8 : kernel-4.18.0-553.177.1.el8_10 (AXSA:2026-2153:107)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2153:107 advisory. kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 kernel: ipv4: validate checksumstart...

Oracle Linux 10 : kernel (ELSA-2026-88477)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88477 advisory. - drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Anusha Srivatsa RHEL-278280 CVE-2026-97493 - drm/amdkfd: Add TLB flush after MES queue...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_87805)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687805 advisory. kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets CVE-2025-22063 kernel: calipso: Don't call calipso functions for AFINET sk...