In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read()… (CVE-2026-98912)

The Linux kernel ALSA sequencer OSS interface had a flaw in snd_seq_oss_read() where the check for whether the next queued event fits in the userspace buffer was inverted. Instead of stopping when the event is larger than the remaining buffer, it stopped when the event was smaller, causing normal events to be skipped or oversized events to be copied into smaller buffers. The fix ensures the function breaks only when the remaining buffer is smaller than the next event and returns -EINVAL if no complete event was copied, preventing undersized reads from appearing as end-of-file while leaving events queued for later reads.

This vulnerability could cause applications reading ALSA sequencer OSS events to misinterpret the end-of-file condition or receive incomplete or incorrectly sized events. This may lead to application errors or unexpected behavior when processing audio sequencer events. There is no indication of direct security exploitation or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to correct the buffer size check logic in snd_seq_oss_read(). Users should update their Linux kernel to a version that includes this fix. No additional mitigation steps are indicated.