PT-2026-90100

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the ALSA FCP component where the fcp ioctl init function allocates a response buffer using kmalloc but fails to clear it before copying the entire buffer back to userspace...

PT-2026-90094

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description The virmidi driver in the ALSA subsystem fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devic...

PT-2026-90096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The portman2x4 driver fails to validate if the devptr-id value is negative when bound via sysfs. This lack of validation can result in out-of-bounds OOB access—where the program reads or...

PT-2026-90097

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the ALSA pcxhr driver. The pcxhr probe function requests pcxhr threaded irq before initializing the mgr-lock mutex. Because the threaded handler utilizes this mute...

PT-2026-90098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ALSA mts64 driver fails to validate if the devptr-id value is negative during the probe process. When bound via sysfs, a negative ID may be assigned, which can lead to Out-of-Bounds...

PT-2026-90099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mpu401 driver fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devices bound manually v...

AlmaLinux 10 : kernel (ALSA-2026:63128)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63128 advisory. kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry...

K000163252: Linux kernel vulnerability CVE-2026-31581 and CVE-2026-23392

Security Advisory Description CVE-2026-31581 In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6firechipabort, the chip struct is allocated as the card's private data via sndcardnew with sizeofstruct sfirechip. When...

AlmaLinux 8 : kernel-rt (ALSA-2026:64770)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64770 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3322)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3247)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

AlmaLinux 9 : grafana-pcp (ALSA-2026:63136)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:63136 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-80815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status...

Linux Distros Unpatched Vulnerability : CVE-2026-80816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053354 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix races at processing SysEx messages OSS sequencer handles the SysEx messages...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053402 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix race of sndseqtimeropen The timer instance per queue is exclusive, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053397 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073358 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated...

SUSE CVE-2026-80812

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

SUSE CVE-2026-80816

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...