CVE-2026-80628

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists in the ALSA sequencer OSS interface. The function snd seq oss readq clear() resets the qlen, head, and tail variables without acquiring the q->lock spinlock, while reader and producer paths use this lock to serialize access to the same ring state. This lack of synchronization can lead to a race condition with snd seq oss readq free() or snd seq oss readq put event(), potentially resulting in stale records remaining in the queue, the loss of newly queued records, or incorrect readiness reports after a wakeup. KCSAN (Kernel Concurrency Sanitizer) identified a data race specifically between snd seq oss readq clear() and snd seq oss readq free().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.