{"advisories":[{"id":"USN-8575-1","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8575-1"},{"id":"USN-8576-1","source":"usn","title":"Linux kernel (NVIDIA Tegra) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8576-1"},{"id":"USN-8593-1","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8593-1"},{"id":"USN-8575-2","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8575-2"},{"id":"USN-8576-2","source":"usn","title":"Linux kernel (NVIDIA Tegra) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8576-2"},{"id":"USN-8575-3","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8575-3"},{"id":"USN-8603-1","source":"usn","title":"Linux kernel (Azure) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8603-1"},{"id":"USN-8610-1","source":"usn","title":"Linux kernel (Azure CVM) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8610-1"},{"id":"USN-8618-1","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8618-1"},{"id":"USN-8620-1","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8620-1"},{"id":"USN-8620-2","source":"usn","title":"Linux kernel (Azure FIPS) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8620-2"},{"id":"USN-8620-3","source":"usn","title":"Linux kernel (Intel IoTG) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8620-3"},{"id":"USN-8620-4","source":"usn","title":"Linux kernel (Intel IoTG) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8620-4"},{"id":"USN-8663-1","source":"usn","title":"Linux kernel (NVIDIA) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8663-1"},{"id":"USN-8664-1","source":"usn","title":"Linux kernel (NVIDIA BaseOS) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8664-1"},{"id":"USN-8668-1","source":"usn","title":"Linux kernel (GCP) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8668-1"},{"id":"USN-8728-1","source":"usn","title":"Linux kernel (GCP) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8728-1"},{"id":"USN-8729-1","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8729-1"},{"id":"USN-8761-1","source":"usn","title":"Linux kernel (Azure) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8761-1"},{"id":"USN-8729-2","source":"usn","title":"Linux kernel (Raspberry Pi Real-time) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8729-2"},{"id":"USN-8761-2","source":"usn","title":"Linux kernel (Azure FIPS) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8761-2"},{"id":"USN-8781-1","source":"usn","title":"Linux kernel (NVIDIA Tegra) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8781-1"},{"id":"USN-8668-2","source":"usn","title":"Linux kernel (Raspberry Pi) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8668-2"},{"id":"USN-8729-3","source":"usn","title":"Linux kernel vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8729-3"},{"id":"USN-8802-1","source":"usn","title":"Linux kernel (Oracle) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8802-1"},{"id":"USN-8728-2","source":"usn","title":"Linux kernel (Azure) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8728-2"},{"id":"USN-8729-4","source":"usn","title":"Linux kernel (Low Latency) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8729-4"},{"id":"USN-8729-5","source":"usn","title":"Linux kernel (AWS FIPS) vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8729-5"}],"cve":"CVE-2026-64133","enrichment":{"affected":[{"configurations":[{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,e060e21fe9cca1e5eafd8a1c597026577771e8d9)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,34d0d492a2812b9289af14bca3573a89275965b2)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,ffa29cea7bf9a4ef2ea8084967f142e0301ac670)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,7b6f8c8eb93f02a74b1de8e521c0952af10d1f43)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,8778386e4387b28f2bf8425d7ffc667c6294457f)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,61c5017c64e2ac9e10b70b14b17a079dbc0a805f)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,7d107239935793995bdc6cf29bb99e180bde4c28)"}},{"platform":null,"status":"affected","versions":{"scheme":"code_commit","value":"[719f82d3987aad4cc9f46d19c35f362672545cad,7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f)"}}],"enrichment":{"confidence":99.0,"confidence_source":"inferred","scores":[{"score":99.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"original":{"product":"Linux","source":"cna","vendor":"Linux"},"product":"linux_kernel","vendor":"linux"},{"configurations":[{"platform":null,"status":"affected","versions":{"scheme":"semver","value":"2.6.35"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[0,2.6.35)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[5.10.258,5.11.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[5.15.209,5.16.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[6.1.175,6.2.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[6.6.142,6.7.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[6.12.92,6.13.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[6.18.34,6.19.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"semver","value":"[7.0.11,7.1.0)"}},{"platform":null,"status":"unaffected","versions":{"scheme":"generic","value":"[7.1,*]"}}],"enrichment":{"confidence":99.0,"confidence_source":"inferred","scores":[{"score":99.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"original":{"product":"Linux","source":"cna","vendor":"Linux"},"product":"linux_kernel","vendor":"linux"}],"created":"2026-07-21T11:15:05.701773+00:00","updated":"2026-07-30T20:30:04.640571+00:00","vendors":["linux","linux$PRODUCT$linux_kernel"]},"epss":{"score":0.00176},"mitre":{"cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"created":"2026-07-19T15:40:28.277000+00:00","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/64xxx/CVE-2026-64133.json","references":["https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2","https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f","https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43","https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f","https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28","https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f","https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9","https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670"],"title":"ALSA: asihpi: Fix potential OOB array access at reading cache","updated":"2026-08-05T12:39:35.138000+00:00","vendors":["linux","linux$PRODUCT$linux_kernel"],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"],"created":"2026-07-19T16:17:55.103000+00:00","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-64133.json","references":["https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2","https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f","https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43","https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f","https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28","https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f","https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9","https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670"],"title":null,"updated":"2026-08-13T15:09:29.820000+00:00","vendors":["linux","linux$PRODUCT$linux_kernel"],"weaknesses":["CWE-125"]},"opencve":{"changes":[{"created":"2026-07-19T16:15:00+00:00","data":[{"details":{"new":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.","old":null},"type":"description"},{"details":{"new":"ALSA: asihpi: Fix potential OOB array access at reading cache","old":null},"type":"title"},{"details":["linux","linux$PRODUCT$linux_kernel"],"type":"first_time"},{"details":{"added":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["linux","linux$PRODUCT$linux_kernel"],"removed":[]},"type":"vendors"},{"details":{"added":["https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2","https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f","https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43","https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f","https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28","https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f","https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9","https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670"],"removed":[]},"type":"references"}],"id":"15a065a8-40c2-4a8c-9f58-6bd900dff1d7"},{"created":"2026-07-20T12:15:00+00:00","data":[{"details":{"added":["CWE-125"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://lore.kernel.org/linux-cve-announce/2026071927-CVE-2026-64133-e669@gregkh/T","https://nvd.nist.gov/vuln/detail/CVE-2026-64133","https://www.cve.org/CVERecord?id=CVE-2026-64133"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}},"removed":{},"updated":{"threat_severity":{"new":"Moderate","old":null}}},"type":"metrics"}],"id":"0d7d40f8-fe64-46fd-8b69-477db8f4826d"},{"created":"2026-07-20T14:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"old":{"score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}}},"type":"metrics"}],"id":"3b221048-980c-481a-bcc6-f7be6101737d"},{"created":"2026-08-13T15:15:00+00:00","data":[{"details":{"added":["cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"],"removed":[]},"type":"cpes"}],"id":"e7eb3074-5f84-4279-9208-58909a844b33"}],"cpes":{"data":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"],"providers":["mitre","nvd"]},"created":{"data":"2026-07-19T00:00:00+00:00","provider":"redhat"},"description":{"data":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00176},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":"Moderate","provider":"redhat"}},"references":{"data":["https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2","https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f","https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43","https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f","https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28","https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f","https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9","https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670","https://lore.kernel.org/linux-cve-announce/2026071927-CVE-2026-64133-e669@gregkh/T","https://nvd.nist.gov/vuln/detail/CVE-2026-64133","https://www.cve.org/CVERecord?id=CVE-2026-64133"],"providers":["mitre","nvd","redhat"]},"title":{"data":"ALSA: asihpi: Fix potential OOB array access at reading cache","provider":"mitre"},"updated":{"data":"2026-08-13T15:09:29.820000+00:00","provider":"nvd"},"vendors":{"data":["linux","linux$PRODUCT$linux_kernel"],"providers":["mitre","nvd","enrichment"]},"weaknesses":{"data":["CWE-125"],"providers":["nvd","redhat"]}},"redhat":{"cpes":[],"created":"2026-07-19T00:00:00+00:00","description":"A flaw was found in the Linux kernel, specifically within the Advanced Linux Sound Architecture (ALSA) asihpi component. This vulnerability occurs because a function designed to retrieve cached information does not properly check the boundaries of an array it is accessing. This oversight could allow a local attacker to access memory outside of its intended limits, potentially leading to system instability (denial of service) or, in some cases, unauthorized privilege escalation.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"threat_severity":"Moderate"},"redhat_repo_path":"2026/CVE-2026-64133.json","references":["https://lore.kernel.org/linux-cve-announce/2026071927-CVE-2026-64133-e669@gregkh/T","https://nvd.nist.gov/vuln/detail/CVE-2026-64133","https://www.cve.org/CVERecord?id=CVE-2026-64133"],"title":"kernel: ALSA: asihpi: Fix potential OOB array access at reading cache","updated":"2026-07-19T00:00:00+00:00","vendors":[],"weaknesses":["CWE-125"]}}