The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi     driver, the conf field is used as a kind of loop index, and it's referred in the index callbacks     (amixer_index() and sum_index()). As spotted recently by fuzzers, the current code causes OOB access at     those functions. | UBSAN: array-index-out-of-bounds in /build/reproducible-     path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48 | index 8 is out of range for type 'unsigned char [8]'     After the analysis, the cause was found to be the lack of the proper (re-)initialization of conj field.
    This patch addresses those OOB accesses by adding the proper initializations of the loop indices.
    (CVE-2026-23076)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23076

high Nessus Plugin ID 297889

Version 1.3