In the Linux kernel, the following vulnerability has been resolved:
ALSA: virtio: Validate control metadata from the device
virtio-snd control handling trusts the device-provided control type and value count returned by the device.
That metadata is then used directly to index g_v2a_type_map[] in virtsnd_kctl_info(), and to size loops and memcpy() operations in virtsnd_kctl_get() and virtsnd_kctl_put() against fixed-size virtio_snd_ctl_value and snd_ctl_elem_value arrays.
A buggy or malicious device can therefore trigger out-of-bounds access by advertising an invalid control type or an oversized value count.
Validate control type and count once in virtsnd_kctl_parse_cfg(), before querying enumerated items or exposing the control to ALSA.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-headers | Oct 11, 2026 | Sep 3, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Jul 28, 2026 | Jul 28, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 29, 2026 | Jul 25, 2026 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-tools-debuginfoUpgrade perf-debuginfo | Sep 7, 2026 | Sep 5, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-oem-26.04bUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-aws-7.0Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-nvidia-bosUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-raspiUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-aws-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-oem-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-oracle-7.0Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-gcpUpgrade linux-image-generic-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 31, 2026 | Jul 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub