Skip to main content
CVE-2026-99271VulnerabilityPublished Updated

Microsoft · ALSA: line6: Clear prev_fbuf on capture buffer release

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99271· Medium

Not known to be exploited · fixed in d063975ed22cdc2cb609a9828e5f658448193606 : update Microsoft when convenient.

Data as of 14 Nov 2026, 08:49 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in d063975ed22cdc2cb609a9828e5f658448193606, aa118c8f61d59387961d58ffae831c5259a9f222, 862d9268f40a6e10cef24eb226e738fb69ce8aa7 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 7 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

What to do

Upgrade Linux to d063975ed22cdc2cb609a9828e5f658448193606, aa118c8f61d59387961d58ffae831c5259a9f222, 862d9268f40a6e10cef24eb226e738fb69ce8aa7 or 22c82f33ff0b68d37041adf1dea5533a5863cd31.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74, < d063975ed22cdc2cb609a9828e5f658448193606
Fixed in
  • d063975ed22cdc2cb609a9828e5f658448193606
LinuxLinuxAffected
  • ≥ 63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74, < aa118c8f61d59387961d58ffae831c5259a9f222
Fixed in
  • aa118c8f61d59387961d58ffae831c5259a9f222
LinuxLinuxAffected
  • ≥ 63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74, < 862d9268f40a6e10cef24eb226e738fb69ce8aa7
Fixed in
  • 862d9268f40a6e10cef24eb226e738fb69ce8aa7
LinuxLinuxAffected
  • ≥ 63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74, < 22c82f33ff0b68d37041adf1dea5533a5863cd31
Fixed in
  • 22c82f33ff0b68d37041adf1dea5533a5863cd31
LinuxLinuxAffected
  • =4.0
Fixed in–

Description

This vulnerability involves the ALSA line6 driver failing to clear the previous frame buffer (prev_fbuf) upon capture buffer release. The information provided is minimal and does not specify the exact impact or exploitation details.

References

Community reviews

Loading reviews…