CVE-2026-98912

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) subsystem. An inverted buffer size check in the OSS (Open Sound System) sequencer read handler allows a local user to cause memory corruption. Because the kernel checks buffer bounds incorrectly, it copies event data into a destination buffer that is too small. A local attacker can exploit this vulnerability by submitting an undersized read request, resulting in a buffer overflow in user memory and a potential Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.