alsa ctxfi driver

CVE-2026-31777 is a medium-severity Linux kernel vulnerability published May 1, 2026, affecting the ALSA ctxfi sound driver, where a missing error check around daio_device_index() could allow a local privileged user to trigger a high-impact availability failure on affected kernels. That sounds...

CVE-2026-31602 is a small-looking Linux kernel fix with a bigger lesson for anyone who runs older enthusiast hardware on modern systems. The issue sits in the ALSA ctxfi driver for Creative Sound Blaster X-Fi cards and stems from a mismatch between a long-ago scalability change and the way the...