CVE-2026-80966: ALSA: portman2x4: Check card index validity at probe
In the Linux kernel, the following vulnerability has been resolved:
ALSA: portman2x4: Check card index validity at probe
Although portman2x4 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters.
Add a sanity check for the card index and warn/correct it if it's a value out of the range.
Affected Software
Event History
Frequently Asked Questions
What configuration is required for this issue to be reachable?
The portman2x4 ALSA driver must be bound via sysfs with a negative device card ID, such as a value used to indicate "none." The issue arises because negative IDs were not validated before being used as indices.
What is the impact of supplying a negative card ID?
A negative card ID can cause out-of-bounds access to the driver's index[] array and other parameters.
What does the fix do?
The fix adds probe-time sanity checking for the card index. Values outside the valid range are warned about and corrected.