CVE-2026-31776: ALSA: ctxfi: Fix missing SPDIFI1 index handling
In the Linux kernel, the following vulnerability has been resolved:
ALSA: ctxfi: Fix missing SPDIFI1 index handling
SPDIF1 DAIO type isn't properly handled in daiodeviceindex() for hw20k2, and it returned -EINVAL, which ended up with the out-of-bounds array access. Follow the hw20k1 pattern and return the proper index for this type, too.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31776?
CVE-2026-31776 has been classified with a medium severity level due to its potential to cause issues with audio data handling.
How do I fix CVE-2026-31776?
To fix CVE-2026-31776, you should update to the latest version of the Linux kernel which incorporates the patch for this vulnerability.
What are the impacts of CVE-2026-31776 on systems?
CVE-2026-31776 may lead to improper SPDIF1 index handling potentially causing system instability or audio playback issues.
Which Linux kernel versions are affected by CVE-2026-31776?
CVE-2026-31776 affects specific versions of the Linux ALSA ctxfi driver prior to the application of the security patch.
Who is responsible for resolving CVE-2026-31776?
The responsibility for resolving CVE-2026-31776 falls on the Linux kernel developers who maintain the ALSA ctxfi driver.