CVE-2026-80812
Description
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) dummy driver. A local user, by manually binding a device via the sysfs interface with an invalid card index, could trigger an out-of-bounds memory access. This vulnerability arises because the snd_dummy_probe() function does not properly validate the provided device ID, potentially leading to system instability or denial of service.
Statement
Moderate severity is assigned to this flaw because exploitation requires local access and results exclusively in a denial of service via a kernel crash, without impacting confidentiality or system integrity. The affected dummy sound driver (snd-dummy) is not loaded by default in standard Red Hat Enterprise Linux installations and is generally limited to testing scenarios involving virtual audio devices. Furthermore, the issue can only be triggered when manually attaching a device through the sysfs driver binding interface, which requires administrative intervention under default configurations.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
