Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-80968

ALSA: mts64: Check card index validity at probe

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in 1566ca99fc0e892b9164ad893d268b00064fff54; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in 5d986d8c9e616636032636d99133f2535f94300d; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in 5168a6241e953ecadb0ec05609649f6a7367fef8; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in 9cd7c59a106e7267d0cbcf68670594584d8689d0; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in 036e7aa793375ab16ea0f64b8de6673220416cc1; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in a4e774eeb61aec64da5b03d3becffde26f7fe4de; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in cf3af453a48c8d905512dfc44a5a59439b70f4f0; From 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad · fixed in d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8

  • Linux Linux

    2.6.19

  • KernelLinux

    From 2.6.19 · fixed in 5.10.270; From 5.11.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.109; From 6.13.0 · fixed in 6.18.50; From 6.19.0 · fixed in 7.2.4

References 8

git.kernel.org