CVE-2026-31776

A flaw was found in the Linux kernel's ALSA ctxfi driver. The daio_device_index() function for hw20k2 improperly handles the SPDIF1 DAIO type, leading to a missing index. This issue can result in an out-of-bounds array access, which may cause system instability or a denial of service (DoS).

Creative CA0110 driver missed SPDIF index handling; upstream adds the mapping. Red Hat notes this as an ALSA indexing bug that could mis-route or mis-report audio devices—apply kernel updates.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_ctxfi module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.