CVE-2026-46049

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ctxfi: Add fallback to default RSR for S/PDIF

spdif_passthru_playback_get_resources() uses atc->pll_rate as the RSR for the MSR calculation loop. However, pll_rate is only updated in atc_pll_init() and not in hw_pll_init(), so it remains 0 after the card init.

When spdif_passthru_playback_setup() skips atc_pll_init() for 32000 Hz, (rsr * desc.msr) always becomes 0, causing the loop to spin indefinitely.

Add fallback to use atc->rsr when atc->pll_rate is 0. This reflects the hardware state, since hw_card_init() already configures the PLL to the default RSR.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 8cc72361481f00253f1e468ade5795427386d593, < d0b53842211f73a10ea174100a213f7fa14b9f33; >= 8cc72361481f00253f1e468ade5795427386d593, < 615b7a5e5d8be68d52f262579906f7e015ba4606; >= 8cc72361481f00253f1e468ade5795427386d593, < dfc00979ff00d9dfdfa1df32144a272ee2728102; >= 8cc72361481f00253f1e468ade5795427386d593, < 25ded535ee261161bcf19dafd525c542e606559d; >= 8cc72361481f00253f1e468ade5795427386d593, < 30f9494c6f2b53a78822cfb653ffbb1d092d44c8; >= 8cc72361481f00253f1e468ade5795427386d593, < 09496158f6ebba8830593f8972035c02f97124c1; >= 8cc72361481f00253f1e468ade5795427386d593, < 95b1ee8442cabbde83b2848e7c6100df90f3a00d; >= 8cc72361481f00253f1e468ade5795427386d593, < 7d61662197ecdc458e33e475b6ada7f6da61d364
LinuxLinux2.6.31

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-460505.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with check operation and nowait requests When CVE-2026-460515.5In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix soft lockup in retry_aligned_read() When retry_aligned_rCVE-2026-460527.5In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they are unhashed Ceph can cCVE-2026-460537.8In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pagesCVE-2026-460547.1In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existinCVE-2026-460557.1In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting UCVE-2026-460568.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_coCVE-2026-460573.3In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() hook_cred_tCVE-2026-460587.8In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m job_abort and device_run Fix kernCVE-2026-460595.5In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN CVE-2026-460610.0GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain CVE-2026-460605.5In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix IRQ cleanup on 6xxx probe failure When adf_dev_up()
CVE-2026-46049: Medium severity, CVSS 5.5 | Vulnix