Linux Distros Unpatched Vulnerability : CVE-2026-64484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before...

PT-2026-64708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Traktor Kontrol S4 input parser within the ALSA caiaq component. The function snd usb caiaq tks4 dispatch processes input streams in fixed 16-byte...

PT-2026-64703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA gus component. The function snd gf1 pcm volume control fails to verify the return value of snd ctl new1, which can return NULL during memory...

PT-2026-64701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ice1712 driver in the Advanced Linux Sound Architecture ALSA fails to verify the return value of the snd ctl new1 function. When memory allocation fails, snd ctl new1 returns NULL;...

PT-2026-64699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio component where the DualSense jack-detection input handler fails to safely verify if an input device belongs to the same physical controller during...

Linux Distros Unpatched Vulnerability : CVE-2026-64482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return valu...

Linux Distros Unpatched Vulnerability : CVE-2026-64490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts t...

Linux Distros Unpatched Vulnerability : CVE-2026-64487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser sndusbcaiaqtks4dispatch decodes the Traktor Kontrol S4 input stream in fixed 16-byte...

PT-2026-64700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized heap leak exists in the ALSA sequencer. The snd seq event dup function copies an incoming event into a pool cell. In UMP-enabled builds, a check is performed to clear th...

PT-2026-64705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es1938 component, the function snd es1938 mixer fails to verify the return value of snd ctl new1. If memory allocation fails, snd ctl new1 returns NULL, and the subsequent...

PT-2026-64706

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA compress component where the snd compr task new function allocates a driver task before validating DMA buffers and reserving file descriptors. If these...

Linux Distros Unpatched Vulnerability : CVE-2026-64479

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the...

Linux Distros Unpatched Vulnerability : CVE-2026-64480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the...

Linux Distros Unpatched Vulnerability : CVE-2026-64488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value befo...

AlmaLinux 10 : kernel (ALSA-2026:42919)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

AlmaLinux 9 : sssd (ALSA-2026:42122)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42122 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd: G...

AlmaLinux 9 : java-1.8.0-openjdk (ALSA-2026:42877)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42877 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK: Enhance...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

AlmaLinux 10 : libpq (ALSA-2026:44391)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:44391 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...