CVE-2026-80968

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: mts64: Check card index validity at probe

Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters.

Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < 1566ca99fc0e892b9164ad893d268b00064fff54affected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < 5d986d8c9e616636032636d99133f2535f94300daffected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < 5168a6241e953ecadb0ec05609649f6a7367fef8affected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < 9cd7c59a106e7267d0cbcf68670594584d8689d0affected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < 036e7aa793375ab16ea0f64b8de6673220416cc1affected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < a4e774eeb61aec64da5b03d3becffde26f7fe4deaffected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < cf3af453a48c8d905512dfc44a5a59439b70f4f0affected
LinuxLinux68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad < d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8affected
LinuxLinux2.6.19affected
LinuxLinux0 < 2.6.19unaffected
LinuxLinux5.10.270 <= 5.10.*unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References