Strix
63.2K

CVE-2026-80968

UnknownEPSS 0.20%

Last modified

CVE-2026-80968 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.

Metrics

EPSS Probability
0.20%

9.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < 1566ca99fc0e892b9164ad893d268b00064fff54; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < 5d986d8c9e616636032636d99133f2535f94300d; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < 5168a6241e953ecadb0ec05609649f6a7367fef8; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < 9cd7c59a106e7267d0cbcf68670594584d8689d0; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < 036e7aa793375ab16ea0f64b8de6673220416cc1; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < a4e774eeb61aec64da5b03d3becffde26f7fe4de; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < cf3af453a48c8d905512dfc44a5a59439b70f4f0; >= 68ab801e32bbe2caac8b8c6e6e94f41fe7d687ad, < d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8
LinuxLinux2.6.19

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80968?
In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.
How severe is CVE-2026-80968?
Severity scoring for CVE-2026-80968 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80968?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80968?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST