In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts… (CVE-2026-80964)
A vulnerability in the Linux kernel ALSA virmidi driver allowed out-of-bounds (OOB) access due to improper validation of the card index during device probing. The driver trusted the devptr->id value without verifying it was within a valid range, which could lead to OOB access if the device was manually bound via sysfs with an invalid index such as -1. This issue has been resolved by adding a sanity check for the card index to warn and correct invalid values.
AI Analysis
Technical Summary
The Linux kernel ALSA virmidi driver did not validate the card index (devptr->id) during probe, blindly trusting it was within the expected range. While this was safe for devices created by the driver at module probe time, manually binding a device via sysfs could set the index to -1 (none), causing out-of-bounds access to internal arrays such as index[]. The fix adds a sanity check to validate and correct the card index, preventing OOB access.
Potential Impact
Improper validation of the card index could lead to out-of-bounds memory access, potentially causing kernel instability or crashes. No known exploits in the wild have been reported. The impact is limited to local device binding scenarios where the index is manually set to an invalid value.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add proper validation of the card index in the virmidi driver. Users should update to a kernel version that includes this patch once available. Until then, avoid manually binding devices with invalid card indices via sysfs.
In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts… (CVE-2026-80964)
Description
A vulnerability in the Linux kernel ALSA virmidi driver allowed out-of-bounds (OOB) access due to improper validation of the card index during device probing. The driver trusted the devptr->id value without verifying it was within a valid range, which could lead to OOB access if the device was manually bound via sysfs with an invalid index such as -1. This issue has been resolved by adding a sanity check for the card index to warn and correct invalid values.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ALSA virmidi driver did not validate the card index (devptr->id) during probe, blindly trusting it was within the expected range. While this was safe for devices created by the driver at module probe time, manually binding a device via sysfs could set the index to -1 (none), causing out-of-bounds access to internal arrays such as index[]. The fix adds a sanity check to validate and correct the card index, preventing OOB access.
Potential Impact
Improper validation of the card index could lead to out-of-bounds memory access, potentially causing kernel instability or crashes. No known exploits in the wild have been reported. The impact is limited to local device binding scenarios where the index is manually set to an invalid value.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add proper validation of the card index in the virmidi driver. Users should update to a kernel version that includes this patch once available. Until then, avoid manually binding devices with invalid card indices via sysfs.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hvhj-8cmg-w82m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80964"]
Threat ID: 6aa4a02d55bf5e2cf5a86b5e
Added to database: 09/12/2026, 00:43:25 UTC
Last enriched: 09/12/2026, 01:23:50 UTC
Last updated: 09/12/2026, 02:41:40 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.