https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:33:02.898302+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-56109 BELL-CVE-2026-56109 2026-10-02T14:33:03.064647+00:00

Affected: Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib

 https://cve.radiocsirt.org/vuln/euvd-2026-336912 EUVD-2026-336912 2026-10-02T14:33:03.064706+00:00 EUVD-2026-336912 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56109 fkie_cve-2026-56109 2026-10-02T14:33:03.064722+00:00

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.

 https://cve.radiocsirt.org/vuln/ghsa-jfrh-w252-q2h4 GHSA-jfrh-w252-q2h4 2026-10-02T14:33:03.064751+00:00

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.

 https://cve.radiocsirt.org/vuln/oesa-2026-2847 OESA-2026-2847 — alsa-lib security update 2026-10-02T14:33:03.064768+00:00

Affected: openEuler:24.03-LTS-SP3: alsa-lib

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.(CVE-2026-56109)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21075-1 openSUSE-SU-2026:21075-1 — Security update for alsa 2026-10-02T14:33:03.064793+00:00

Security update for alsa

 https://cve.radiocsirt.org/vuln/rhsa-2026:40573 RHSA-2026:40573 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T14:33:03.064810+00:00

alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow

 https://cve.radiocsirt.org/vuln/suse-su-2026:22291-1 SUSE-SU-2026:22291-1 — Security update for alsa 2026-10-02T14:33:03.064828+00:00

Security update for alsa

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56109 UBUNTU-CVE-2026-56109 2026-10-02T14:33:03.064843+00:00

Affected: Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.