In the Linux kernel, the following vulnerability has been resolved:
ALSA: virtio: Validate control metadata from the device
virtio-snd control handling trusts the device-provided control type and value count returned by the device.
That metadata is then used directly to index g_v2a_type_map[] in virtsnd_kctl_info(), and to size loops and memcpy() operations in virtsnd_kctl_get() and virtsnd_kctl_put() against fixed-size virtio_snd_ctl_value and snd_ctl_elem_value arrays.
A buggy or malicious device can therefore trigger out-of-bounds access by advertising an invalid control type or an oversized value count.
Validate control type and count once in virtsnd_kctl_parse_cfg(), before querying enumerated items or exposing the control to ALSA.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Jul 28, 2026 | Jul 28, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 29, 2026 | Jul 25, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virt | Sep 7, 2026 | Sep 5, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-ibm-7.0Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-aws-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-gkeUpgrade linux-image-gke-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-generic-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-26.04bUpgrade linux-image-gcp-64kUpgrade linux-image-gke-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1018-nvidia | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 31, 2026 | Jul 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub