vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80966

ALSA: portman2x4: Check card index validity at probe

N/A
Published: September 11, 2026 at 07:42 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
2.6.21757e119bf52b014b3181eed97b01f87a245b8ff9
Vendor states this is fixed in 0048994854f3e9c57b7a754de43ef8da5818d140 (fixed)
Vendor states this is fixed in 0ce391090809d610647f424b9b1dc24aa2c546fd (fixed)
Vendor states this is fixed in 3690ef20469d5959378260e2752f2314a2572913 (fixed)
Vendor states this is fixed in 45ea0707298798678a60ff861b695aea049a5469 (fixed)
Vendor states this is fixed in 5d7ac5e9ee5ba76b567ace13b46075caf79dcca0 (fixed)
Vendor states this is fixed in 64898e9bd8b7b229efa8642b85b56b326a6ec3dc (fixed)
Vendor states this is fixed in d7ef7890e3e35b4ba09e76fc6b72047a1599a5e8 (fixed)
Vendor states this is fixed in e1ce8ad1009b1736b3044b3324350dcfdd516f42 (fixed)
Vendor states this is fixed in 2.6.21 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/0ce391090809d610647f424b9b1dc24aa2c546fd
Source: cverecord
https://git.kernel.org/stable/c/d7ef7890e3e35b4ba09e76fc6b72047a1599a5e8
Source: cverecord
https://git.kernel.org/stable/c/e1ce8ad1009b1736b3044b3324350dcfdd516f42
Source: cverecord
https://git.kernel.org/stable/c/3690ef20469d5959378260e2752f2314a2572913
Source: cverecord
https://git.kernel.org/stable/c/45ea0707298798678a60ff861b695aea049a5469
Source: cverecord
https://git.kernel.org/stable/c/5d7ac5e9ee5ba76b567ace13b46075caf79dcca0
Source: cverecord
https://git.kernel.org/stable/c/0048994854f3e9c57b7a754de43ef8da5818d140
Source: cverecord
https://git.kernel.org/stable/c/64898e9bd8b7b229efa8642b85b56b326a6ec3dc

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card