CVE-2026-23076
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/02/2026
Última modificación:
04/02/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: ctxfi: Fix potential OOB access in audio mixer handling<br />
<br />
In the audio mixer handling code of ctxfi driver, the conf field is<br />
used as a kind of loop index, and it&#39;s referred in the index callbacks<br />
(amixer_index() and sum_index()).<br />
<br />
As spotted recently by fuzzers, the current code causes OOB access at<br />
those functions.<br />
| UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48<br />
| index 8 is out of range for type &#39;unsigned char [8]&#39;<br />
<br />
After the analysis, the cause was found to be the lack of the proper<br />
(re-)initialization of conj field.<br />
<br />
This patch addresses those OOB accesses by adding the proper<br />
initializations of the loop indices.



