CVE Explorer

CVE-2026-31778

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in init_card The loop creates a whitespace-stripped copy of the card shortname where `len < sizeof(card->id)` is used for the bounds check. Since sizeof(card->id) is 16 and the local id buffer is also 16 bytes, writing 16 non-space characters fills the entire buffer, overwriting the terminating nullbyte. When this non-null-terminated string is later passed to snd_card_set_id() -> copy

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c32f38af08e170189663b117ce62da0a8949a86efe4d3515866e1d1ac22cb131

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/caiaq/device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.31"},{"lessThan":"2.6.31","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/caiaq/device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"02d9c5b0b5553a391448b6d655262bd829f90234","status":"affected","version":"bafeee5b1f8d32cbf791c322b40a6fa91d8ccf7a","versionType":"git"},{"lessThan":"3f7f8bae0d52cbd07ab04b76b6aac89ef98ee9f6","status":"affected","version":"bafeee5b1f8d32cbf791c322b40a6fa91d8ccf7a","versionType":"git"},{"lessThan":"66194c2575a4f567577ae70b1d7561163ce791a6","status":"affected","version":"bafeee5b1f8d32cbf791c…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/02d9c5b0b5553a391448b6d655262bd829f90234"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/3178b62e2e31bab39f63d4c8e54bf4ee0a425627"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/3afa2e67f3523a980a2f90fd63c22322ac2b9ce0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/3f7f8bae0d52cbd07ab04b76b6aac89ef98ee9f6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/45424e871abf2a152e247a9cff78359f18dd95c0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/66194c2575a4f567577ae70b1d7561163ce791a6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/7594a6464873d90fd229e5b94cdd3b92c9feabed"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/a82c1bce2d1299dd3c686a8fe48cf75b79a403c7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b0522b3870ad8ba3e8c45ae93d93f04bceab6b66a9f0205835bbd66c1e9899 · sha256:3244bf249be89cf3… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer