7 matches found
UBUNTU-CVE-2026-99271
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271 ALSA: line6: Clear prev_fbuf on capture buffer release
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
EUVD-2026-119291
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...
CVE-2026-99271
The Linux kernel contains a slab-use-after-free read vulnerability in the ALSA line6 driver. The issue occurs because the line6_buffer_release() function frees the capture PCM stream buffer using kfree() but fails to clear the line6pcm->prev_fbuf pointer. If playback is subsequently initiated ...
Linux Distros Unpatched Vulnerability : CVE-2026-99271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal:...
UBUNTU-CVE-2026-98836
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...