Answer in brief
CVE-2026-46049 records a Unknown severity vulnerability in ALSA: ctxfi: Add fallback to default RSR for S/PDIF. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8cc72361481f00253f1e468ade5795427386d593 <d0b53842211f73a10ea174100a213f7fa14b9f33 || >=8cc72361481f00253f1e468ade5795427386d593 <615b7a5e5d8be68d52f262579906f7e015ba4606 || >=8cc72361481f00253f1e468ade5795427386d593 <dfc00979ff00d9dfdfa1df32144a272ee2728102 || >=8cc72361481f00253f1e468ade5795427386d593 <25ded535ee261161bcf19dafd525c542e606559d || >=8cc72361481f00253f1e468ade5795427386d593 <30f9494c6f2b53a78822cfb653ffbb1d092d44c8 || >=8cc72361481f00253f1e468ade5795427386d593 <09496158f6ebba8830593f8972035c02f97124c1 || >=8cc72361481f00253f1e468ade5795427386d593 <95b1ee8442cabbde83b2848e7c6100df90f3a00d || >=8cc72361481f00253f1e468ade5795427386d593 <7d61662197ecdc458e33e475b6ada7f6da61d364 | d0b53842211f73a10ea174100a213f7fa14b9f33, 615b7a5e5d8be68d52f262579906f7e015ba4606, dfc00979ff00d9dfdfa1df32144a272ee2728102, 25ded535ee261161bcf19dafd525c542e606559d, 30f9494c6f2b53a78822cfb653ffbb1d092d44c8, 09496158f6ebba8830593f8972035c02f97124c1, 95b1ee8442cabbde83b2848e7c6100df90f3a00d, 7d61662197ecdc458e33e475b6ada7f6da61d364 |
| Linux/Linuxgeneric | 2.6.31 | Not reported |
Published upstream
May 27, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Add fallback to default RSR for S/PDIF spdif_passthru_playback_get_resources() uses atc->pll_rate as the RSR for the MSR calculation loop. However, pll_rate is only updated in atc_pll_init() and not in hw_pll_init(), so it remains 0 after the card init. When spdif_passthru_playback_setup() skips atc_pll_init() for 32000 Hz, (rsr * desc.msr) always becomes 0, causing the loop to spin indefinitely. Add fallback to use atc->rsr when atc->pll_rate is 0. This reflects the hardware state, since hw_card_init() already configures the PLL to the default RSR.
Quoted source text, attributed separately from HOL analysis.