EUVD-2026-76287

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80964 ALSA: virmidi: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

PT-2026-96412

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

PT-2026-96514

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This...

CVE-2026-80968: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

PT-2026-96536

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the...

PT-2026-90452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF memory corruption exists in the USB gadget u audio component. The g audio cleanup function calls snd card free when closed to start sound card teardown but immediate...

PT-2026-90102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ALSA aloop driver fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devices bound manual...

PT-2026-96418

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

PT-2026-96462

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr probe requests pcxhr threaded irq before initializing mgr-lock, even though the threaded handler takes that mutex. Initialize the manager locks before request...

PT-2026-90101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA bcd2000 driver. The function bcd2000 free usb related resources frees USB Request Blocks URBs but fails to clear the associated pointers. Becaus...

CVE-2026-80971: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

PT-2026-90096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The portman2x4 driver fails to validate if the devptr-id value is negative when bound via sysfs. This lack of validation can result in out-of-bounds OOB access—where the program reads or...

PT-2026-90098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ALSA mts64 driver fails to validate if the devptr-id value is negative during the probe process. When bound via sysfs, a negative ID may be assigned, which can lead to Out-of-Bounds...

PT-2026-90100

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the ALSA FCP component where the fcp ioctl init function allocates a response buffer using kmalloc but fails to clear it before copying the entire buffer back to userspace...

PT-2026-90094

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description The virmidi driver in the ALSA subsystem fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devic...

PT-2026-90099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mpu401 driver fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devices bound manually v...

PT-2026-90097

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the ALSA pcxhr driver. The pcxhr probe function requests pcxhr threaded irq before initializing the mgr-lock mutex. Because the threaded handler utilizes this mute...

CVE-2026-80964: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80965: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the...