CVE-2026-31602
kernel: ALSA: ctxfi: Limit PTP to a single page
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) ctxfi driver. When handling memory allocations, the ct_vm_map() function can attempt to access memory beyond its allocated boundaries if aggregate memory allocations exceed a single page limit. This out-of-bounds access triggers a page fault, which can lead to a system crash. A local attacker could exploit this vulnerability to cause a Denial of Service (DoS) on the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-125 · Out-of-bounds Read