CVE-2026-46049: ALSA: ctxfi: Add fallback to default RSR for S/PDIF
ALSA: ctxfi: Add fallback to default RSR for S/PDIF
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
Which systems and usage scenario are affected?
Systems using the Linux ALSA ctxfi driver are exposed when S/PDIF passthrough playback is configured at 32000 Hz. The supplied software list also identifies Microsoft azl3 kernel version 6.6.139.1-1.
What access is required to trigger the issue?
An attacker or local user needs local access and low privileges, with no user interaction required. Triggering the affected S/PDIF passthrough setup at 32000 Hz can cause an infinite loop and deny availability.
What configuration condition causes the infinite loop?
The issue results from the card initialization path leaving pll_rate at 0 while hardware already uses the default RSR. The corrected behavior falls back to atc->rsr when pll_rate is 0.