-

CVE-2026-80964

ALSA: virmidi: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved:

ALSA: virmidi: Check card index validity at probe

virmidi driver blindly trusts that the given devptr->id value is
within the proper card index range at probe.  It's OK for the devices
the driver itself creates at the module probe time, but if the device
is bound manually via sysfs interface, this could be -1 as "none", and
this leads to OOB access for index[] and other parameters.

Add a sanity check for the card index and warn/correct it if it's a
value out of the range.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < 3ee9cea821730805f232f1e4db0f95e7420477fc
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < ffefee7daf2362f534097422bb7f8894e798adfd
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < 368c521503e38e9bcfcf04c053eb1f85d22391b2
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < 43f161c53279adac0517cf1c443e531e738b54ce
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < 40ee4224e2fe24c05b92e4d37476adb6e83f10e9
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < f48c5f3b03afdb795e5f448a1d53d912d5b09f2e
Status affected
Version 3564fbb880f9a62ddbb81b7440c32e0e6619c52d
Version < b65d5182ecd6b7a24a83d980a0d06e809ef876c5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.16
Status affected
Version 0
Version < 2.6.16
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/43f161c53279adac0517cf1c443e531e738b54ce
https://git.kernel.org/stable/c/40ee4224e2fe24c05b92e4d37476adb6e83f10e9
https://git.kernel.org/stable/c/f48c5f3b03afdb795e5f448a1d53d912d5b09f2e
https://git.kernel.org/stable/c/b65d5182ecd6b7a24a83d980a0d06e809ef876c5
https://git.kernel.org/stable/c/368c521503e38e9bcfcf04c053eb1f85d22391b2
https://git.kernel.org/stable/c/3ee9cea821730805f232f1e4db0f95e7420477fc
https://git.kernel.org/stable/c/ffefee7daf2362f534097422bb7f8894e798adfd