01 Record

CVE-2026-98912

ALSA: seq: oss: Reject reads that cannot fit the next event

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ALSA: seq: oss: Reject reads that cannot fit the next event

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 8.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-26.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-10-23 11:55Z5 DAYS AGO
Last updated: 2026-10-26 06:56Z3 DAYS AGO
Reserved: 2026-09-25
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 9d594070ddc62be96ed3f5762d9357dff5672d38bd2b2e13cadebd434fff29d3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b3b4b647313757a275be7f7f9d0415d0a90acf73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 591226398c1f93bd994678237ff0be229b19d3bb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 372bec8a01e2ab8eaa6851bdc346ede5f82dba99, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2922cf2583e590f51bed613a6fcd27b9aea83674, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7483fd5f6990f43cc266e94b3f50ce84856ebb97, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 20b8520d1ef996173065f7abdde47b99136c0785, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 611f538253d970f4d152003841544e875828d015, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b3b4b647313757a275be7f7f9d0415d0a90acf73
git.kernel.orghttps://git.kernel.org/stable/c/591226398c1f93bd994678237ff0be229b19d3bb
git.kernel.orghttps://git.kernel.org/stable/c/372bec8a01e2ab8eaa6851bdc346ede5f82dba99
git.kernel.orghttps://git.kernel.org/stable/c/2922cf2583e590f51bed613a6fcd27b9aea83674
git.kernel.orghttps://git.kernel.org/stable/c/7483fd5f6990f43cc266e94b3f50ce84856ebb97
git.kernel.orghttps://git.kernel.org/stable/c/20b8520d1ef996173065f7abdde47b99136c0785
git.kernel.orghttps://git.kernel.org/stable/c/611f538253d970f4d152003841544e875828d015

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.