UBUNTU-CVE-2026-80812

    Dashboard / Vulnerabilities / UBUNTU-CVE-2026-80812

    UBUNTU-CVE-2026-80812

    Published: 4 Sept 2026Last Modified: 25 Sept 2026
    Upstream:
    CVE-2026-80812

    Summary:

    Details: In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trusts that the given devptr->id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if the device is bound manually via sysfs interface, this could be -1 as "none", and this leads to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

    References: https://ubuntu.com/security/CVE-2026-80812, https://www.cve.org/CVERecord?id=CVE-2026-80812, https://git.kernel.org/linus/02442d5fe8ee365a084b055d4fa81a0c1abfc3fd

    Affected packages

    Package

    Name: linux

    Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Ftrusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    3.11.0-12.19

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2026-80812 | CVE-DB