Red Hat Security Advisory

RHSA-2026:40573

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-07-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images alsa-lib-1.2.16.1-2.hum1@aarch64, alsa-lib-1.2.16.1-2.hum1@src, alsa-lib-1.2.16.1-2.hum1@x86_64 +6

Fixes 2 records

TI-2026-40493 CVE-2026-56109 · GHSA-jfrh-w252-q2h4

ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c

LOW 30

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configu…

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00138 Published 2026-06-22 Partial fix · 1.2.16.1 CWE-415

TI-2026-61688 CVE-2026-90781 · GHSA-f8w2-9vv9-pxwq

alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

LOW 21

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00179 Published 2026-09-13 Partial fix CWE-193