Answer in brief
CVE-2026-23078 records a Unknown severity vulnerability in ALSA: scarlett2: Fix buffer overflow in config retrieval. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <d5e80d1f97ae55bcea1426f551e4419245b41b9c || >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <51049f6e3f05d70660e2458ad3bb302a3721b751 || >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <91a756d22f0482eac5bedb113c8922f90b254449 || >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <27049f50be9f5ae3a62d272128ce0b381cb26a24 || >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <31a3eba5c265a763260976674a22851e83128f6d || >=ac34df733d2dfe3b553897a1e9e1a44414f09834 <6f5c69f72e50d51be3a8c028ae7eda42c82902cb | d5e80d1f97ae55bcea1426f551e4419245b41b9c, 51049f6e3f05d70660e2458ad3bb302a3721b751, 91a756d22f0482eac5bedb113c8922f90b254449, 27049f50be9f5ae3a62d272128ce0b381cb26a24, 31a3eba5c265a763260976674a22851e83128f6d, 6f5c69f72e50d51be3a8c028ae7eda42c82902cb |
| Linux/Linuxgeneric | 5.14 | Not reported |
Published upstream
Feb 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count > 1. The code checks `if (size == 2)` where `size` is the total buffer size in bytes, then loops `count` times treating each element as u16 (2 bytes). This causes the loop to access `count * 2` bytes when the buffer only has `size` bytes allocated. Fix by checking the element size (config_item->size) instead of the total buffer size. This ensures the endianness conversion matches the actual element type.
Quoted source text, attributed separately from HOL analysis.