CVE-2026-80829 ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput sndusbmidinovationoutput lays out a two-byte header at transferbuffer0..1 and passes &transferbuffer2 together with a length of ep-maxtransfer - 2 to sndrawmiditransmit:...

CVE-2026-80829 ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput sndusbmidinovationoutput lays out a two-byte header at transferbuffer0..1 and passes &transferbuffer2 together with a length of ep-maxtransfer - 2 to sndrawmiditransmit:...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

EUVD-2026-71278

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

CVE-2026-80828 affects the Linux kernel ALSA usb-audio subsystem. When usb_audio_resume() encounters a failure in snd_usb_pcm_resume() or snd_usb_mixer_resume() during system resume, it jumps to err_out, skipping the out: block that restores D0 power state and decrements chip->num_suspended_in...

CVE-2026-80816

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-80816 ALSA: FCP: Use a private URB for the notification endpoint

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

EUVD-2026-71251

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-80816

This Linux kernel vulnerability affects the ALSA FCP (Firmware Configuration Protocol) module. The root cause is that fcp_init_notify() shared a URB (mixer->urb ) with the optional UAC2 status interrupt endpoint . On devices exposing that endpoint, the early-return path fired prematurely, leav...

CVE-2026-80816 ALSA: FCP: Use a private URB for the notification endpoint

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-80815

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

CVE-2026-80815

CVE-2026-80815 affects the ALSA scarlett2 driver in the Linux kernel, used for Focusrite Scarlett 2nd-generation USB audio interfaces. The root cause is that scarlett2_init_notify() shared mixer->urb with the UAC2 status interrupt endpoint managed by mixer.c. On devices with that endpoint, the...

CVE-2026-80815 ALSA: scarlett2: Use a private URB for the notification endpoint

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

EUVD-2026-71250

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

CVE-2026-80815 ALSA: scarlett2: Use a private URB for the notification endpoint

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

CVE-2026-80812

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

CVE-2026-80812 ALSA: dummy: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

CVE-2026-80812

CVE-2026-80812 affects the Linux kernel 's ALSA dummy driver. The function snd_dummy_probe() does not validate the devptr->id (card index) value, assuming it is always within range. While this is safe for devices created at module probe time, a device manually bound via the sysfs interface can...