CVE-2026-80964

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) virmidi driver. This vulnerability allows a local user to trigger an out-of-bounds access by manually binding a device via the sysfs interface with an invalid card index. This can lead to system instability or potentially more severe impacts.

A flaw was found in the Linux kernel's ALSA virmidi (virtual MIDI) driver, which Red Hat Product Security rated Moderate severity with a CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The virmidi driver does not validate the card index (devptr->id) at probe time. This is harmless for devices the driver itself creates at module probe time, but when a device is bound manually through the sysfs interface, the index can be an out-of-range value such as -1 ("none"), causing an out-of-bounds access to the index[] array and other parameters. A local user with the privileges needed to bind devices via sysfs could exploit this to cause system instability, including a kernel crash and denial of service. The Red Hat Enterprise Linux kernel and kernel-rt packages and the RHEL CoreOS kernels shipped with OpenShift Container Platform are in scope of this flaw. Because the impact is Moderate with a CVSS score below 7.0, fixes for the affected Red Hat product streams are currently deferred; the residual risk is limited to local denial of service on systems where an untrusted local user is able to manually bind a virmidi device through sysfs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.