https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 05:34:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23078 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: scarlett2: Fix buffer overflow in config retrieval</p> <p>The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count &gt; 1.</p> <p>The code checks `if (size == 2)` where `size` is the total buffer size in bytes, then loops `count` times treating each element as u16 (2 bytes). This causes the loop to access `count * 2` bytes when the buffer only has `size` bytes allocated.</p> <p>Fix by checking the element size (config_item-&gt;size) instead of the total buffer size. This ensures the endianness conversion matches the actual element type.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: scarlett2: Fix buffer overflow in config retrieval</p> <p>The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count &gt; 1.</p> <p>The code checks `if (size == 2)` where `size` is the total buffer size in bytes, then loops `count` times treating each element as u16 (2 bytes). This causes the loop to access `count * 2` bytes when the buffer only has `size` bytes allocated.</p> <p>Fix by checking the element size (config_item-&gt;size) instead of the total buffer size. This ensures the endianness conversion matches the actual element type.</p> https://vulnerability.circl.lu/vuln/cve-2026-23078