CVE-2026-80628

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) sequencer OSS (Open Sound System) emulation. A local user could exploit a data race condition when the snd_seq_oss_readq_clear() function resets the read queue state without proper locking. This can lead to stale records, dropped events, or incorrect readiness reporting, potentially causing system instability or a denial of service (DoS).

This vulnerability is rated as Moderate impact because exploitation is restricted to local users with access to the legacy ALSA OSS emulation interface and primarily results in a denial of service rather than code execution or information disclosure. The flaw stems from missing synchronization during queue resets, which can cause inconsistent state or kernel crashes when handling concurrent reader and reset operations. In typical Red Hat Enterprise Linux environments, legacy OSS sequencer support is rarely required by standard applications, reducing the attack surface on systems where sound subsystems are unused or restricted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.