vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80968

ALSA: mts64: Check card index validity at probe

N/A
Published: September 11, 2026 at 07:42 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
2.6.1968ab801e32bbe2caac8b8c6e6e94f41fe7d687ad
Vendor states this is fixed in 036e7aa793375ab16ea0f64b8de6673220416cc1 (fixed)
Vendor states this is fixed in 1566ca99fc0e892b9164ad893d268b00064fff54 (fixed)
Vendor states this is fixed in 5168a6241e953ecadb0ec05609649f6a7367fef8 (fixed)
Vendor states this is fixed in 5d986d8c9e616636032636d99133f2535f94300d (fixed)
Vendor states this is fixed in 9cd7c59a106e7267d0cbcf68670594584d8689d0 (fixed)
Vendor states this is fixed in a4e774eeb61aec64da5b03d3becffde26f7fe4de (fixed)
Vendor states this is fixed in cf3af453a48c8d905512dfc44a5a59439b70f4f0 (fixed)
Vendor states this is fixed in d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8 (fixed)
Vendor states this is fixed in 2.6.19 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/036e7aa793375ab16ea0f64b8de6673220416cc1
Source: cverecord
https://git.kernel.org/stable/c/a4e774eeb61aec64da5b03d3becffde26f7fe4de
Source: cverecord
https://git.kernel.org/stable/c/cf3af453a48c8d905512dfc44a5a59439b70f4f0
Source: cverecord
https://git.kernel.org/stable/c/d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8
Source: cverecord
https://git.kernel.org/stable/c/1566ca99fc0e892b9164ad893d268b00064fff54
Source: cverecord
https://git.kernel.org/stable/c/5d986d8c9e616636032636d99133f2535f94300d
Source: cverecord
https://git.kernel.org/stable/c/5168a6241e953ecadb0ec05609649f6a7367fef8
Source: cverecord
https://git.kernel.org/stable/c/9cd7c59a106e7267d0cbcf68670594584d8689d0

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card