7.8

CVE-2026-64133

ALSA: asihpi: Fix potential OOB array access at reading cache

In the Linux kernel, the following vulnerability has been resolved:

ALSA: asihpi: Fix potential OOB array access at reading cache

find_control() to retrieve a cached info accesses the array with the
given index blindly, which may lead to an OOB array access.
Add a sanity check for avoiding it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.35 < 5.10.258
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.209
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.175
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.142
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.92
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.34
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.11
Linux ≫ Linux Kernel Version7.1 Updaterc1
Linux ≫ Linux Kernel Version7.1 Updaterc2
Linux ≫ Linux Kernel Version7.1 Updaterc3
Linux ≫ Linux Kernel Version7.1 Updaterc4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.029
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9
Patch
https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2
Patch
https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670
Patch
https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43
Patch
https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f
Patch
https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f
Patch
https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28
Patch
https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f
Patch