CVE-2026-80964
In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr->id value is within the proper card index range at probe.
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr->id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.
- CVSS
- Not yet scored
- EPSS
- 0.17% probability · 7th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://git.kernel.org/stable/c/368c521503e38e9bcfcf04c053eb1f85d22391b2
- https://git.kernel.org/stable/c/3ee9cea821730805f232f1e4db0f95e7420477fc
- https://git.kernel.org/stable/c/40ee4224e2fe24c05b92e4d37476adb6e83f10e9
- https://git.kernel.org/stable/c/43f161c53279adac0517cf1c443e531e738b54ce
- https://git.kernel.org/stable/c/b65d5182ecd6b7a24a83d980a0d06e809ef876c5
- https://git.kernel.org/stable/c/f48c5f3b03afdb795e5f448a1d53d912d5b09f2e
- https://git.kernel.org/stable/c/ffefee7daf2362f534097422bb7f8894e798adfd
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.