CVE-2026-46157

ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger

State: Published
Severity: 7.8 High
Published: May 28, 2026
Updated: Oct 30, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger

Currently the runtime.oss.trigger field may be accessed concurrently without protection, which may lead to the data race. And, in this case, it may lead to more severe problem because it's a bit field; as writing the data, it may overwrite other bit fields as well, which confuses the operation completely, as spotted by fuzzing.

Fix it by covering runtime.oss.trigger bit fled also with the existing params_lock mutex in both snd_pcm_oss_get_trigger() and snd_pcm_oss_poll().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e718cecb73214f53fe8f48083eb7afe9b0921103Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c937a494901df8fbfaa5037a5883a7cd44282ea8Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49f9d048845be874df7997e4b1ce662de450c4b6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ac3e9b55b7da6f0be51720bd330a0edc1a8b61f1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6b01c1bc9a4748ab37548a700a8aaff910e298e6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 901ac0ff15edf9503162e2cf6579bd11a30f1ed4Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e718cecb73214f53fe8f48083eb7afe9b0921103Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c937a494901df8fbfaa5037a5883a7cd44282ea8Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49f9d048845be874df7997e4b1ce662de450c4b6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ac3e9b55b7da6f0be51720bd330a0edc1a8b61f1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6b01c1bc9a4748ab37548a700a8aaff910e298e6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 901ac0ff15edf9503162e2cf6579bd11a30f1ed4Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.