Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46088

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() snd_ctl_elem_init_enum_names() advances pointer p through the names buffer while decrementing buf_len. If buf_len reaches zero but items remain, the next iteration calls strnlen(p, 0). While strnlen(p, 0) returns 0 and would hit the existing name_len == 0 error path, CONFIG_FORTIFY_SOURCE's fortified strnlen() first checks maxlen against __buil
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:32fbf8760bd4a9dd6072e1c689f3aef25dbe892ebad6b9bc8b9018cb590d4ff6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/core/control.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/core/control.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"708f6ec9bcdf58bfd561409110baaf4fd3be4ea3","status":"affected","version":"8d448162bda5ae3b5ecb26fe50c8fbbeae99faa4","versionType":"git"},{"lessThan":"bfcbb4994da9e979c4bcfcf24aaaac69e457e48e","status":"affected","version":"8d448162bda5ae3b5ecb26fe50c8fbbeae99faa4","versionType":"git"},{"lessThan":"a470f7cabc4df72d9bd132f5719a8717292bb440","status":"affected","version":"8d448162bda5ae3b5ecb26fe5…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/core/control.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/core/control.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"708f6ec9bcdf58bfd561409110baaf4fd3be4ea3","status":"affected","version":"8d448162bda5ae3b5ecb26fe50c8fbbeae99faa4","versionType":"git"},{"lessThan":"bfcbb4994da9e979c4bcfcf24aaaac69e457e48e","status":"affected","version":"8d448162bda5ae3b5ecb26fe50c8fbbeae99faa4","versionType":"git"},{"lessThan":"a470f7cabc4df72d9bd132f5719a8717292bb440","status":"affected","version":"8d448162bda5ae3b5ecb26fe5…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1fbe46d2b72754d8bd580e13e59ccb5d3d0e8cb0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/654c818a69c21d2bea4e8fd9eae7da865df9a5c8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/708f6ec9bcdf58bfd561409110baaf4fd3be4ea3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/82012fd3e78a14360fbc2f1a7491589896704f97"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/8ba0214c3dd32b8ec652947e3f2bc5b8f6e6be9e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a470f7cabc4df72d9bd132f5719a8717292bb440"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bfcbb4994da9e979c4bcfcf24aaaac69e457e48e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/e0da8a8cac74f4b9f577979d131f0d2b88a84487"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7330a6d94863fdb4f4d943bc240f460ea26d7d58d1423f7dff6314a2fd0a9cd8 · sha256:2e318a7d3575fcf1… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer