CVE-2026-80812None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trusts that the given devptr->id value is within the proper card index range. It's OK for th…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
ALSA: dummy: Check card index validity at probe
snd_dummy_probe() blindly trusts that the given devptr->id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters.
Add a sanity check for the card index and warn/correct it if it's a value out of the range.
Linux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < b7579e86afcec932e169d10e2d603abed8dd2fdfLinux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < 4d0892a90b57f0e89b274c3f3c51c2fa17937c88Linux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < b20eb7ecbdaa3e649023fe41b177d90983ffb487Linux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < c9f10a001c243d1f069ebb0e2f4999ad4043a254Linux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < f20c2c32ec1c5c3526f29a03b487c55a5890996cLinux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < 3dba0e92e18980cb5a4d70a9a263539ae4f0c7ecLinux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < 690b721b9595f9a43395fd4047a832c42b5b6078Linux >= 6e65c1cc4458b2784224759b6137a50d4f65e610 < 02442d5fe8ee365a084b055d4fa81a0c1abfc3fdLinux 2.6.16Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device