In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by static analysis and reviewed with AI-assisted source auditing.
Fix
Microsoft's update · Critical
- Release Notes — azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 · build 6.6.158.1-1
From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-10-28.
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 2
- StatusReceived → PublishedNVD modified 2026-10-19 09:17
- First seenunscoredNVD modified 2026-10-19 10:18
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 8
- https://git.kernel.org/stable/c/0a52ba6d3b268bb82f0ec4cb861bc68d252369c0
- https://git.kernel.org/stable/c/3c6ca6d9342f4a0be7c1413180e11023d13b5cde
- https://git.kernel.org/stable/c/3db8afba2d210b7d80cd5cc6b76d7f46daa9b47a
- https://git.kernel.org/stable/c/5a4c974dee03cc46eac43c82f33e34ec94f0b348
- https://git.kernel.org/stable/c/5c89e7965220e85d06ae4c58adb7d7bb6da2440c
- https://git.kernel.org/stable/c/8477643cb91c9e09ac1b11890eef421ae63e53f7
- https://git.kernel.org/stable/c/c9e6e5f38bf75276605f1952b22285f5f3abcaff
- https://git.kernel.org/stable/c/fba079ea22822248c82c3a999c88676d05b17bda