CVE-2026-3196: Integer Overflow or Wraparound
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition.
AI Analysis
Technical Summary
This vulnerability involves an integer overflow or wraparound in the virtio-snd device when processing PCM_INFO requests from a guest. By providing out-of-bounds stream counts, a malicious guest can cause the host to allocate excessive memory, potentially resulting in a denial of service condition. The issue is documented as CVE-2026-3196 with a CVSS v3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The affected version explicitly stated is 8.2.0. The vendor advisory from Red Hat does not currently specify a remediation or patch status.
Potential Impact
The vulnerability can lead to denial of service on the host system due to unbounded memory allocation triggered by a malicious guest. There is no impact on confidentiality or integrity reported. No known active exploits have been observed.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-3196 for current remediation guidance. Until a patch or official fix is available, consider restricting untrusted guest access or applying other environment-specific controls to limit exposure.
CVE-2026-3196: Integer Overflow or Wraparound
Description
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition.
CVSS v3.1
Score 5.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an integer overflow or wraparound in the virtio-snd device when processing PCM_INFO requests from a guest. By providing out-of-bounds stream counts, a malicious guest can cause the host to allocate excessive memory, potentially resulting in a denial of service condition. The issue is documented as CVE-2026-3196 with a CVSS v3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The affected version explicitly stated is 8.2.0. The vendor advisory from Red Hat does not currently specify a remediation or patch status.
Potential Impact
The vulnerability can lead to denial of service on the host system due to unbounded memory allocation triggered by a malicious guest. There is no impact on confidentiality or integrity reported. No known active exploits have been observed.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-3196 for current remediation guidance. Until a patch or official fix is available, consider restricting untrusted guest access or applying other environment-specific controls to limit exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fedora
- Date Reserved
- 2026-02-25T11:09:37.726Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-3196","vendor":"Red Hat"}]
Threat ID: 6a3576cef198dc38c1c38eab
Added to database: 06/19/2026, 17:05:18 UTC
Last enriched: 06/26/2026, 19:19:12 UTC
Last updated: 08/02/2026, 07:17:57 UTC
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.