CVE-2026-31776: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_device_index() for hw20k2, and it returned -EINVAL, which ended up with the out-of-bounds array access. Follow the hw20k1 pattern and return the proper index for this type, too.

Засегнати продукти

• Linux Linux: a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 преди 950decf59d4e978b60a792ce0b3e1555a608f489; a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 преди b045ab3dff97edae6d538eeff900a34c098761f8
• Linux Linux: 6.19; преди 6.19; 6.19.12 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31776
• https://nvd.nist.gov/vuln/detail/CVE-2026-31776
• https://git.kernel.org/stable/c/950decf59d4e978b60a792ce0b3e1555a608f489
• https://git.kernel.org/stable/c/b045ab3dff97edae6d538eeff900a34c098761f8