RHSA-2026:40573
- Source
- https://access.redhat.com/errata/RHSA-2026:40573
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2026:40573.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2026:40573
- Upstream
CVE (2)
- Published
- 2026-08-19T10:18:29Z
- Modified
- 2026-09-22T10:42:45Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2026:40573
- https://images.redhat.com/
- https://access.redhat.com/security/cve/CVE-2026-56109
- https://access.redhat.com/security/updates/classification/
- https://access.redhat.com/security/cve/CVE-2026-90781
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40573.json
- https://bugzilla.redhat.com/show_bug.cgi?id=2491439
- https://www.cve.org/CVERecord?id=CVE-2026-56109
- https://nvd.nist.gov/vuln/detail/CVE-2026-56109
- https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0
- https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1
- https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/
- https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c
- https://bugzilla.redhat.com/show_bug.cgi?id=2532707
- https://www.cve.org/CVERecord?id=CVE-2026-90781
- https://nvd.nist.gov/vuln/detail/CVE-2026-90781
- https://github.com/alsa-project/alsa-lib
- https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241
- https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020
- https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/
- https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse
Affected packages
Red Hat:hummingbird:1 / alsa-lib
Package
- Name
- alsa-lib
- Purl
- pkg:rpm/redhat/alsa-lib
Red Hat:hummingbird:1 / alsa-lib-devel
Package
- Name
- alsa-lib-devel
- Purl
- pkg:rpm/redhat/alsa-lib-devel
Red Hat:hummingbird:1 / alsa-topology
Package
- Name
- alsa-topology
- Purl
- pkg:rpm/redhat/alsa-topology