CVE-2026-31775

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) ctxfi driver. An issue during the initialization of Digital Audio Input/Output (DAIO) resources incorrectly enumerates the SPDIF1 type, which is not defined for certain hardware models. This can lead to a kernel crash on affected systems, resulting in a Denial of Service (DoS).

This Moderate severity flaw in the Linux kernel's ALSA ctxfi driver can lead to a system crash, resulting in a Denial of Service. The vulnerability occurs due to incorrect enumeration of audio resources during DAIO initialization on systems equipped with specific audio hardware. Exploitation requires local access to a system with the affected hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_ctxfi kernel module from loading. This can be achieved by blacklisting the module, which may impact audio functionality if the snd_ctxfi driver is required for your system's audio hardware.

To blacklist the module:

1. Create a file /etc/modprobe.d/blacklist-snd_ctxfi.conf with the content: blacklist snd_ctxfi
2. Regenerate the initramfs: sudo dracut -f -v
3. Reboot the system.

Warning: A system reboot is required for the blacklist to take full effect. This action may affect audio output if the snd_ctxfi module is essential for your hardware.