63 matches found
UBUNTU-CVE-2026-99271
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271 ALSA: line6: Clear prev_fbuf on capture buffer release
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
EUVD-2026-119291
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271
The Linux kernel contains a slab-use-after-free read vulnerability in the ALSA line6 driver. The issue occurs because the line6_buffer_release() function frees the capture PCM stream buffer using kfree() but fails to clear the line6pcm->prev_fbuf pointer. If playback is subsequently initiated ...
CVE-2026-99271 ALSA: line6: Clear prev_fbuf on capture buffer release
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
Linux Distros Unpatched Vulnerability : CVE-2026-99271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal:...
SUSE CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
DEBIAN-CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
AZL-108729 CVE-2026-98836 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
UBUNTU-CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
CVE-2026-98836 ALSA: line6: reject oversized playback packets
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
CVE-2026-98836
A slab-out-of-bounds vulnerability exists in the Linux kernel ALSA line6 driver. The issue occurs in submit_audio_out_urb() because the number of bytes written into an out.buffer slice is not validated against the slice size. On devices with a large IN wMaxPacketSize and a small OUT wMaxPacketSiz...
CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
CVE-2026-98836 ALSA: line6: reject oversized playback packets
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
EUVD-2026-103776
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...
PT-2026-117055
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA line6 driver where playback packets are not validated against the allocated buffer size. The submit audio out urb function calculates the frame count based on...
CVE-2026-98836: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...