CVE-2026-31777

A flaw was found in the Linux kernel's ALSA ctxfi driver. The driver failed to properly validate the return value from the daio_device_index() function. This oversight could lead to the driver making incorrect assumptions, potentially causing system instability.

CTXFI index mapping errors are now checked before use, complementing the missing-index fix. Red Hat recommends patched kernels for ctxfi hardware users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_ctxfi module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.