{"id":"CVE-2026-98912","revision":"f00b48f662ff48c99509ce36892fcda0","records":[{"revision":"f00b48f662ff48c99509ce36892fcda0","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-98912","aliases":[],"title":"ALSA: seq: oss: Reject reads that cannot fit the next event","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Reject reads that cannot fit the next event\n\nsnd_seq_oss_read() checks whether the next queued OSS sequencer event\nfits in the remaining userspace buffer before removing it from the read\nqueue.\n\nThe check is inverted. It currently stops when the event is smaller than\nthe remaining buffer, so a normal 4-byte event is not copied for an\n8-byte read buffer. Conversely, an 8-byte event can be copied for a\nsmaller read count.\n\nBreak only when the remaining userspace buffer is smaller than the next\nevent, and report -EINVAL if no complete event has been copied. This\nprevents an undersized read from looking like end-of-file while leaving\nthe event queued for a later read with a large enough buffer.","state":0,"publishedAt":"2026-10-23T11:55:04.908+00:00","modifiedAt":"2026-10-23T11:55:04.908+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/core/seq/oss/seq_oss_rw.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"b3b4b647313757a275be7f7f9d0415d0a90acf73\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"591226398c1f93bd994678237ff0be229b19d3bb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"372bec8a01e2ab8eaa6851bdc346ede5f82dba99\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"2922cf2583e590f51bed613a6fcd27b9aea83674\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"7483fd5f6990f43cc266e94b3f50ce84856ebb97\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"20b8520d1ef996173065f7abdde47b99136c0785\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"611f538253d970f4d152003841544e875828d015\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.10.271\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.15.222\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.1.189\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.6.158\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.12.111\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18.53\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/core/seq/oss/seq_oss_rw.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/b3b4b647313757a275be7f7f9d0415d0a90acf73","https://git.kernel.org/stable/c/591226398c1f93bd994678237ff0be229b19d3bb","https://git.kernel.org/stable/c/372bec8a01e2ab8eaa6851bdc346ede5f82dba99","https://git.kernel.org/stable/c/2922cf2583e590f51bed613a6fcd27b9aea83674","https://git.kernel.org/stable/c/7483fd5f6990f43cc266e94b3f50ce84856ebb97","https://git.kernel.org/stable/c/20b8520d1ef996173065f7abdde47b99136c0785","https://git.kernel.org/stable/c/611f538253d970f4d152003841544e875828d015"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98912","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98912","identifiers":["CVE-2026-98912"]},"retained":false,"historicalAffected":[]}],"coverage":[]}