CVE-2026-23078: ALSA: scarlett2: Fix buffer overflow in config retrieval
In the Linux kernel, the following vulnerability has been resolved:
ALSA: scarlett2: Fix buffer overflow in config retrieval
The scarlett2usbgetconfig() function has a logic error in the endianness conversion code that can cause buffer overflows when count > 1.
The code checks if (size == 2) where size is the total buffer size in bytes, then loops count times treating each element as u16 (2 bytes). This causes the loop to access count 2 bytes when the buffer only has size bytes allocated.
Fix by checking the element size (configitem->size) instead of the total buffer size. This ensures the endianness conversion matches the actual element type.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23078?
The CVE-2026-23078 vulnerability is considered to be of medium severity due to the buffer overflow risk.
How do I fix CVE-2026-23078?
To resolve CVE-2026-23078, you should update your Linux kernel to the latest version that does not have this vulnerability.
What problems does CVE-2026-23078 cause?
CVE-2026-23078 can lead to potential buffer overflow exploits impacting system stability and security.
Which software versions are affected by CVE-2026-23078?
CVE-2026-23078 affects various versions of the Linux kernel, specifically those between 5.14 and 6.19-rc6.
Does CVE-2026-23078 require immediate action?
Yes, given the nature of the vulnerability, it is advisable to take action as soon as possible to mitigate potential risks.