{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80965","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-08-26T14:34:25.810Z","datePublished":"2026-09-11T19:42:30.507Z","dateUpdated":"2026-09-14T11:59:11.793Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-09-14T11:59:11.793Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: serial-u16550: Check card index validity at probe\n\nserial-u16550 driver blindly trusts that the given devptr->id value is\nwithin the proper card index range at probe.  It's OK for the devices\nthe driver itself creates at the module probe time, but if the device\nis bound manually via sysfs interface, this could be -1 as \"none\", and\nthis leads to OOB access for index[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it's a\nvalue out of the range."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/drivers/serial-u16550.c"],"versions":[{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"41a952304cc8a308748e3f58462c879f2a9c4340","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"cc0f757d017f4271f137c77e130314bb23792347","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"1cb30691dc893aafcbc1e211e94764014c0f5d12","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"487ede9b648fc0eb15866f408c41aac2c57f85d5","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"fbf3fb097e66fc1874e54ecc46d600d9325480d6","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"7555e83d7738e65dc83921e3c85bbdc081f08f2f","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"6d6fdb24fe2eaf6174fc502284c6e1dc5f7242ba","status":"affected","versionType":"git"},{"version":"9caf6b5908e1e3b10478e9201ca1be809145253f","lessThan":"e0fb960b227fcdebe22e4f26c9486d60943c0424","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/drivers/serial-u16550.c"],"versions":[{"version":"2.6.16","status":"affected"},{"version":"0","lessThan":"2.6.16","status":"unaffected","versionType":"semver"},{"version":"5.10.270","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.221","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.188","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.157","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.109","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.50","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.4","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3-rc1","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"5.10.270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"5.15.221"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"6.1.188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"6.6.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"6.12.109"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"6.18.50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"7.2.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.16","versionEndExcluding":"7.3-rc1"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/41a952304cc8a308748e3f58462c879f2a9c4340"},{"url":"https://git.kernel.org/stable/c/cc0f757d017f4271f137c77e130314bb23792347"},{"url":"https://git.kernel.org/stable/c/1cb30691dc893aafcbc1e211e94764014c0f5d12"},{"url":"https://git.kernel.org/stable/c/487ede9b648fc0eb15866f408c41aac2c57f85d5"},{"url":"https://git.kernel.org/stable/c/fbf3fb097e66fc1874e54ecc46d600d9325480d6"},{"url":"https://git.kernel.org/stable/c/7555e83d7738e65dc83921e3c85bbdc081f08f2f"},{"url":"https://git.kernel.org/stable/c/6d6fdb24fe2eaf6174fc502284c6e1dc5f7242ba"},{"url":"https://git.kernel.org/stable/c/e0fb960b227fcdebe22e4f26c9486d60943c0424"}],"title":"ALSA: serial-u16550: Check card index validity at probe","x_generator":{"engine":"bippy-1.2.0"}}}}