CVE-2026-80812

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trusts that the given devptr->id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-25)

Published

2026-09-04

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/02442d5fe8ee365a084b055d4fa81a0c1abfc3fd
• https://git.kernel.org/stable/c/3dba0e92e18980cb5a4d70a9a263539ae4f0c7ec
• https://git.kernel.org/stable/c/4d0892a90b57f0e89b274c3f3c51c2fa17937c88
• https://git.kernel.org/stable/c/690b721b9595f9a43395fd4047a832c42b5b6078
• https://git.kernel.org/stable/c/b20eb7ecbdaa3e649023fe41b177d90983ffb487

Check your stackJSON