Buffer Overflow in Linux Kernel's ALSA for Line6 USB Audio Devices

CVE-2026-98836

What is CVE-2026-98836?

A buffer overflow vulnerability exists in the ALSA Line6 USB audio driver within the Linux kernel, where oversized playback packets can lead to memory corruption. The issue arises when the driver writes more data than allocated during the audio playback process. This can happen when a device presents a large incoming packet size while having a smaller outgoing size, resulting in writes that exceed the intended memory boundaries. Failure to validate the length of written data could compromise data integrity and system stability, emphasizing the necessity for accurate packet size management in audio communications.

References