CVE-2026-31776 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_device_index() for hw20k2, and it returned -EINVAL, which ended up with the out-of-bounds array access. Follow the hw20k1 pattern and return the proper index for this type, too.
A vulnerability in the Linux kernel's ALSA subsystem for the Creative Sound Blaster Audigy 2 (ctxfi) driver has been addressed. The issue arose because the SPDIF1 Digital Audio Input/Output (DAIO) type was not correctly processed for the hardware version 20k2. This oversight led to an invalid error code being returned, which caused an out-of-bounds array access. The fix involves aligning the handling of SPDIF1 with the established pattern for another hardware version, ensuring the correct index is returned.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/950decf59d4e978b60a792ce0b3e1555a608f489 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b045ab3dff97edae6d538eeff900a34c098761f8 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.19, < 6.19.12 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Initial Analysis | [email protected] |
| May 2, 2026 | CVE Modified | kernel.org |
| May 1, 2026 | New CVE Received | kernel.org |