CVE-2026-80968 - ALSA: mts64: Check card index validity at probe

Back Back to CVE browser

MEDIUM

ALSA: mts64: Check card index validity at probe

Published Sep 11, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.22%

Description

Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters.

Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  2.6.19
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <2.6.19
- Version
  5.10.270
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.221
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.188
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.109
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.50
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.6.157
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  7.2.4
  Status
  unaffected
  Constraints
  <=7.2.*
- Version
  7.3-rc1
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
2.6.19	affected	-
0	unaffected	<2.6.19
5.10.270	unaffected	<=5.10.*
5.15.221	unaffected	<=5.15.*
6.1.188	unaffected	<=6.1.*
6.12.109	unaffected	<=6.12.*
6.18.50	unaffected	<=6.18.*
6.6.157	unaffected	<=6.6.*
7.2.4	unaffected	<=7.2.*
7.3-rc1	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 10

kernel-rt

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected
Red Hat OpenShift Container Platform 4

openshift/ose-rhel-coreos-8

Not affected
Red Hat OpenShift Container Platform 4

openshift/ose-rhel-coreos-9

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 10	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a
Red Hat OpenShift Container Platform 4	openshift/ose-rhel-coreos-8	Not affected	n/a
Red Hat OpenShift Container Platform 4	openshift/ose-rhel-coreos-9	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (13)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-80968		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2532220		Issue Tracking
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80968.mbox
https://git.kernel.org/stable/c/036e7aa793375ab16ea0f64b8de6673220416cc1
https://git.kernel.org/stable/c/1566ca99fc0e892b9164ad893d268b00064fff54
https://git.kernel.org/stable/c/5168a6241e953ecadb0ec05609649f6a7367fef8
https://git.kernel.org/stable/c/5d986d8c9e616636032636d99133f2535f94300d
https://git.kernel.org/stable/c/9cd7c59a106e7267d0cbcf68670594584d8689d0
https://git.kernel.org/stable/c/a4e774eeb61aec64da5b03d3becffde26f7fe4de
https://git.kernel.org/stable/c/cf3af453a48c8d905512dfc44a5a59439b70f4f0
https://git.kernel.org/stable/c/d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8
https://nvd.nist.gov/vuln/detail/CVE-2026-80968
https://www.cve.org/CVERecord?id=CVE-2026-80968