SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80968

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the ALSA mts64 driver in the Linux kernel, where a lack of validation for negative card index values can lead to out-of-bounds (OOB) access, potentially compromising system stability or security. Organizations using Linux systems with the ALSA mts64 driver should prioritize this issue to prevent exploitation that could arise from improper handling of device parameters. Immediate remediation is advised to ensure the integrity and reliability of affected systems.

CVE
CVE-2026-80968
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.