Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31619

In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efr_status_names[] has 17 entries so a status value outside that range goes off into the weeds when looking at the %s value. Even worse, the status could return EFR_STATUS_INCOMPLETE which is 0x80000000, and is obviously not in that array of potential strings. Fix th
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ce8239885726977b95d397ef123a3ad6b79ee1e1e7e746375612753d29e080b5
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/firewire/fireworks/fireworks_command.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"183aa0de0f680496b9feb85c9d182681ad4600dd","status":"affected","version":"bde8a8f23bbe6db51fa4e81644273af18fef3d7a","versionType":"git"},{"lessThan":"62fcb273fbee5b2a0e7ed41cc914c8d7d1a5d285","status":"affected","version":"bde8a8f23bbe6db51fa4e81644273af18fef3d7a","versionType":"git"},{"lessThan":"327f8e730e3c65ec97df9d3b07de66aeb3dc932d","status":"affected","version":"b…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/firewire/fireworks/fireworks_command.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.16"},{"lessThan":"3.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/firewire/fireworks/fireworks_command.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"183aa0de0f680496b9feb85c9d182681ad4600dd","status":"affected","version":"bde8a8f23bbe6db51fa4e81644273af18fef3d7a","versionType":"git"},{"lessThan":"62fcb273fbee5b2a0e7ed41cc914c8d7d1a5d285","status":"affected","version":"bde8a8f23bbe6db51fa4e81644273af18fef3d7a","versionType":"git"},{"lessThan":"327f8e730e3c65ec97df9d3b07de66aeb3dc932d","status":"affected","version":"b…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/firewire/fireworks/fireworks_command.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.16"},{"lessThan":"3.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/affected/1

Source references

9 source assertions
{"url":"https://git.kernel.org/stable/c/07704bbf36f57e4379e4cadf96410dab14621e3b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/8
{"url":"https://git.kernel.org/stable/c/183aa0de0f680496b9feb85c9d182681ad4600dd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/327f8e730e3c65ec97df9d3b07de66aeb3dc932d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/62fcb273fbee5b2a0e7ed41cc914c8d7d1a5d285"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/67cfd14074cdafab5de3f7cfc0952c1a9b653e5d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/682d8accf0d83a871e8c327b95c81f53902c922b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/cc624b3d2be13297100539b64ad950695188e046"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/e103f98f6615ed2934e9cf340654f0cad9eb8a8a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f856f4b6efd51be7950e4b84c06cd961961ca41c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c414e6568158d5314f8fe935b96218b262acb232df9f13e4faa3a613e3c0dcf9 · sha256:a7a5698a53a34e3c… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer