Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23076

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi driver, the conf field is used as a kind of loop index, and it's referred in the index callbacks (amixer_index() and sum_index()). As spotted recently by fuzzers, the current code causes OOB access at those functions. | UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4aa89b59251e98de01307bbe61d80a149a29daeec9a7a0458858428687bb950a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/pci/ctxfi/ctamixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.31"},{"lessThan":"2.6.31","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/pci/ctxfi/ctamixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6524205326e0c1a21263b5c14e48e14ef7e449ae","status":"affected","version":"8cc72361481f00253f1e468ade5795427386d593","versionType":"git"},{"lessThan":"afca7ff5d5d4d63a1acb95461f55ca9a729feedf","status":"affected","version":"8cc72361481f00253f1e468ade5795427386d593","versionType":"git"},{"lessThan":"8c1d09806e1441bc6a54b9a4f2818918046d5174","status":"affected","version":"8cc72361481f00253f1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/pci/ctxfi/ctamixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.31"},{"lessThan":"2.6.31","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/pci/ctxfi/ctamixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6524205326e0c1a21263b5c14e48e14ef7e449ae","status":"affected","version":"8cc72361481f00253f1e468ade5795427386d593","versionType":"git"},{"lessThan":"afca7ff5d5d4d63a1acb95461f55ca9a729feedf","status":"affected","version":"8cc72361481f00253f1e468ade5795427386d593","versionType":"git"},{"lessThan":"8c1d09806e1441bc6a54b9a4f2818918046d5174","status":"affected","version":"8cc72361481f00253f1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/61006c540cbdedea83b05577dc7fb7fa18fe1276"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6524205326e0c1a21263b5c14e48e14ef7e449ae"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/873e2360d247eeee642878fcc3398babff7e387c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/8c1d09806e1441bc6a54b9a4f2818918046d5174"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/a8c42d11b0526a89192bd2f79facb4c60c8a1f38"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/afca7ff5d5d4d63a1acb95461f55ca9a729feedf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d77ba72558cd66704f0fb7e0969f697e87c0f71c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:122351f9d174353121eaf45d8c11381b234cfdb0ebafb76bad65a81085743eed · sha256:39fd99112f15e600… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer