CVE-2026-98006: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1inurb in caiaq dev The epqinurb object belonging to the caiaq device is coupled within the struct sndusbcaiaqdev. After usbsubmiturbepqinurb, GFPKERNEL executes successfully, epqinurb is successfully...

CVE-2026-98006

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1inurb in caiaq dev The epqinurb object belonging to the caiaq device is coupled within the struct sndusbcaiaqdev. After usbsubmiturbepqinurb, GFPKERNEL executes successfully, epqinurb is successfully...

PT-2026-98778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ALSA PCM subsystem where snd pcm hw params and snd pcm hw free release the PCM stream lock before the buffer is actually freed via do free pages...

CVE-2026-98086: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch legacyrmidi before it exists sndumpparseendpoint sets ump-parsed on every exit, including error, before the caller attaches the legacy rawmidi device. umphandleepnamemsg then treats parsed as "legacyrmidi ...

Linux Distros Unpatched Vulnerability : CVE-2026-98086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: do not touch legacyrmidi before it exists sndumpparseendpoint sets ump-parsed on every exit, including error, before the caller attaches the legacy...

Linux Distros Unpatched Vulnerability : CVE-2026-98116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF sndpcmhwparams and sndpcmhwfree guard buffer reallocation with an mmapcount check perform...

PT-2026-98669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the ALSA caiaq device. The epq in urb and midi out urb objects are coupled within the struct snd usb caiaqdev. When init card calls snd usb caiaq se...

PT-2026-98593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA usbusx2y component, the function i usx2y in04 int processes interrupt URB USB Request Block data without verifying the actual length variable. A short transfer from a...

PT-2026-98594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usbusx2y component where a size mismatch occurs between the in04 last array and the in04 buf buffer. The in04 last array in struct usx2ydev is declared with a...

PT-2026-98595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA us122l driver where the hwdep mmap callback fails to clear the VM MAYWRITE flag on read-buffer mappings created with PROT READ, even after rejecting initially...

PT-2026-98729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ALSA caiaq driver's resource management during error handling. The driver attempts to release resources through a common destructor call; however, certa...

PT-2026-98749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA Advanced Linux Sound Architecture UMP component where the snd ump parse endpoint function sets the ump-parsed flag upon exit, including during error states,...

Linux Distros Unpatched Vulnerability : CVE-2026-98006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: Decoupling ep1inurb in caiaq dev The epqinurb object belonging to the caiaq device is coupled within the struct sndusbcaiaqdev. After...

Linux Distros Unpatched Vulnerability : CVE-2026-97931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE s...

Linux Distros Unpatched Vulnerability : CVE-2026-98066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a...

Linux Distros Unpatched Vulnerability : CVE-2026-97929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transf...

Linux Distros Unpatched Vulnerability : CVE-2026-97930

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usbusx2y: fix in04last array size mismatch with in04buf The in04last array in struct usx2ydev is declared as char24, but in04buf is allocated as...

CVE-2026-97930

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: fix in04last array size mismatch with in04buf The in04last array in struct usx2ydev is declared as char24, but in04buf is allocated as sizeofstruct us428ctls which is 21 bytes. In iusx2yin04int, when ctlsnapshotla...

SUSE CVE-2026-97418

In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup sndes18xxmixer creates controls with sndctlnew1 and then stores bookkeeping pointers or sets privatefree before calling sndctladd. sndctlnew1 can return NULL on...

AZL-103646 CVE-2026-97418 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup sndes18xxmixer creates controls with sndctlnew1 and then stores bookkeeping pointers or sets privatefree before calling sndctladd. sndctlnew1 can return NULL on...