ALSA: ctxfi Driver Index Mapping Error Handling Fix

Publication date: 2026-05-01

Last updated on: 2026-05-07

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper value returned from daio_device_index(), but it's not always true. Add a proper error check to deal with the error from the function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-01

Last Modified

2026-05-07

Generated

2026-07-06

AI Q&A

2026-05-01

EPSS Evaluated

2026-07-05

NVD

CVE-2026-31777

EUVD

EUVD-2026-26590

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	From 2.6.31 (inc) to 6.19.12 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's ALSA ctxfi driver. The driver assumed that the function daio_device_index() would always return a valid value, but this assumption was incorrect. The vulnerability arises because the driver did not properly check for errors returned by daio_device_index(), potentially leading to improper behavior.

Impact Analysis

Because the ctxfi driver did not check for errors from daio_device_index(), it could lead to unexpected or incorrect behavior in the ALSA sound subsystem. This might cause system instability or malfunction related to audio device handling.

Hi! I’m here to help you understand CVE-2026-31777. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70