https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:35:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80972 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: aloop: Check card index validity at probe</p> <p>aloop driver blindly trusts that the given devptr-&gt;id value is within the proper card index range at probe. It&#39;s OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as &#34;none&#34;, and this leads to OOB access for index[] and other parameters.</p> <p>Add a sanity check for the card index and warn/correct it if it&#39;s a value out of the range.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: aloop: Check card index validity at probe</p> <p>aloop driver blindly trusts that the given devptr-&gt;id value is within the proper card index range at probe. It&#39;s OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as &#34;none&#34;, and this leads to OOB access for index[] and other parameters.</p> <p>Add a sanity check for the card index and warn/correct it if it&#39;s a value out of the range.</p> https://vulnerability.circl.lu/vuln/cve-2026-80972