CVE-2026-23076
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/02/2026
Última modificación:
06/02/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: ctxfi: Fix potential OOB access in audio mixer handling<br />
<br />
In the audio mixer handling code of ctxfi driver, the conf field is<br />
used as a kind of loop index, and it&#39;s referred in the index callbacks<br />
(amixer_index() and sum_index()).<br />
<br />
As spotted recently by fuzzers, the current code causes OOB access at<br />
those functions.<br />
| UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48<br />
| index 8 is out of range for type &#39;unsigned char [8]&#39;<br />
<br />
After the analysis, the cause was found to be the lack of the proper<br />
(re-)initialization of conj field.<br />
<br />
This patch addresses those OOB accesses by adding the proper<br />
initializations of the loop indices.
Impacto
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/61006c540cbdedea83b05577dc7fb7fa18fe1276
- https://git.kernel.org/stable/c/6524205326e0c1a21263b5c14e48e14ef7e449ae
- https://git.kernel.org/stable/c/873e2360d247eeee642878fcc3398babff7e387c
- https://git.kernel.org/stable/c/8c1d09806e1441bc6a54b9a4f2818918046d5174
- https://git.kernel.org/stable/c/a8c42d11b0526a89192bd2f79facb4c60c8a1f38
- https://git.kernel.org/stable/c/afca7ff5d5d4d63a1acb95461f55ca9a729feedf
- https://git.kernel.org/stable/c/d77ba72558cd66704f0fb7e0969f697e87c0f71c



