🔐 CVE Alert

CVE-2026-23076

UNKNOWN 0.0

ALSA: ctxfi: Fix potential OOB access in audio mixer handling

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi driver, the conf field is used as a kind of loop index, and it's referred in the index callbacks (amixer_index() and sum_index()). As spotted recently by fuzzers, the current code causes OOB access at those functions. | UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48 | index 8 is out of range for type 'unsigned char [8]' After the analysis, the cause was found to be the lack of the proper (re-)initialization of conj field. This patch addresses those OOB accesses by adding the proper initializations of the loop indices.

Vendor linux
Product linux
Ecosystems
Industries
Technology
Published Feb 4, 2026
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Linux / Linux
8cc72361481f00253f1e468ade5795427386d593 < 6524205326e0c1a21263b5c14e48e14ef7e449ae 8cc72361481f00253f1e468ade5795427386d593 < afca7ff5d5d4d63a1acb95461f55ca9a729feedf 8cc72361481f00253f1e468ade5795427386d593 < 8c1d09806e1441bc6a54b9a4f2818918046d5174 8cc72361481f00253f1e468ade5795427386d593 < a8c42d11b0526a89192bd2f79facb4c60c8a1f38 8cc72361481f00253f1e468ade5795427386d593 < d77ba72558cd66704f0fb7e0969f697e87c0f71c 8cc72361481f00253f1e468ade5795427386d593 < 873e2360d247eeee642878fcc3398babff7e387c 8cc72361481f00253f1e468ade5795427386d593 < 61006c540cbdedea83b05577dc7fb7fa18fe1276
Linux / Linux
2.6.31

References

NVD ↗ CVE.org ↗ EPSS Data ↗
git.kernel.org: https://git.kernel.org/stable/c/6524205326e0c1a21263b5c14e48e14ef7e449ae git.kernel.org: https://git.kernel.org/stable/c/afca7ff5d5d4d63a1acb95461f55ca9a729feedf git.kernel.org: https://git.kernel.org/stable/c/8c1d09806e1441bc6a54b9a4f2818918046d5174 git.kernel.org: https://git.kernel.org/stable/c/a8c42d11b0526a89192bd2f79facb4c60c8a1f38 git.kernel.org: https://git.kernel.org/stable/c/d77ba72558cd66704f0fb7e0969f697e87c0f71c git.kernel.org: https://git.kernel.org/stable/c/873e2360d247eeee642878fcc3398babff7e387c git.kernel.org: https://git.kernel.org/stable/c/61006c540cbdedea83b05577dc7fb7fa18fe1276