alsa security

CVE-2026-64001 is a newly published Linux kernel vulnerability in the legacy OSS compatibility layer of ALSA, the Advanced Linux Sound Architecture subsystem. The flaw is a use-after-free condition in the code that handles OSS PCM configuration through procfs: under a specific allocation-failure...

CVE-2026-64133 is a newly published Linux kernel vulnerability in the ALSA driver for AudioScience ASI professional audio hardware, and its practical significance is far narrower than its 7.8 High CVSS v3.1 score first suggests. The flaw is a potential out-of-bounds array access in the...