CVE-2026-31777: Linux kernel · ALSA: ctxfi: Check the error for index mapping
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d4d3b8cbb70a2de247cbfe99bdb232aef9ed59bc : update Linux kernel when convenient.
Data as of 6 Nov 2026, 16:33 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-06.
- Patch
- Available – fixed in d4d3b8cbb70a2de247cbfe99bdb232aef9ed59bc, 971854e7b6ddda78669d3d0cf6566c7b8aca1fdb, 277c6960d4ddb94d16198afd70c92c3d4593d131
Exploitation evidence
Disclosed: evidence found.
CVE published 1 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade Linux kernel to d4d3b8cbb70a2de247cbfe99bdb232aef9ed59bc, 971854e7b6ddda78669d3d0cf6566c7b8aca1fdb or 277c6960d4ddb94d16198afd70c92c3d4593d131.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in the Linux kernel source code as indicated by the fixed commit hashes. Users should update to a Linux kernel version that includes these fixes or apply the relevant patches to mitigate this vulnerability.
Description
A vulnerability in the ALSA ctxfi driver in the Linux kernel version 2.6.31 was addressed by adding proper error checking for the index mapping function daio_device_index(). Previously, the driver assumed the function always returned a valid value, which was not guaranteed.