CVE-2026-80969
In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr->id value is within the proper card index range at probe.
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr->id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.
- CVSS
- Not yet scored
- EPSS
- 0.22% probability · 12th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://git.kernel.org/stable/c/26a25fb4ef4ba2a33069d489feb75a4c36899cca
- https://git.kernel.org/stable/c/3a997371ac2957f11a033a4cec2930042dadb7e3
- https://git.kernel.org/stable/c/4a3d6c22ca6b6c16e8055fb518aa87f5e043f754
- https://git.kernel.org/stable/c/76b6bc38d0f310c0ae1b2a2ebabe2947d92c601a
- https://git.kernel.org/stable/c/8adda66edf795d4648f8e26f312e4414c535d25a
- https://git.kernel.org/stable/c/cc4215cc2a4b2a9cf8b1952bbe8d5bf925acb3ea
- https://git.kernel.org/stable/c/d606c703d1e0c54996cb3db76a753157cb2a3c06
- https://git.kernel.org/stable/c/f7dcecb92ed192ff5fcf842918fb1aaea84b5bdd
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.