CVE-2026-46088: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
ALSA: control: Validate buflen before strnlen() in sndctleleminitenumnames()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Configuration
In snd_ctl_elem_init_enum_names(), add a buf_len == 0 guard at loop entry to prevent calling fortified strnlen(p, 0) when the buffer is exhausted (buf_len reaches zero).
Linux kernel (snd_ctl_elem_init_enum_names) buf_len guard at loop entry = Add check: buf_len == 0 -> return/stop before calling fortified strnlen() - Compensating control
Ensure systems with CONFIG_FORTIFY_SOURCE enabled are updated with the kernel fix, to avoid BRK exception panic triggered by fortified strnlen() in the exhausted-buffer loop.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46088?
CVE-2026-46088 has a risk score of 23, indicating a critical severity level.
How do I fix CVE-2026-46088?
To fix CVE-2026-46088, upgrade to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What impact does CVE-2026-46088 have on the Linux kernel?
CVE-2026-46088 could allow for potential memory corruption due to improper validation of buffer lengths, leading to system instability.
Is CVE-2026-46088 exploitable remotely?
There is no indication that CVE-2026-46088 is exploitable remotely; it primarily affects local access.
Which version of Linux is affected by CVE-2026-46088?
CVE-2026-46088 affects the ALSA control subsystem in the Linux kernel prior to the patched version.