Skip to content
OpenAdvisories
Medium RHSA-2026:40573 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Aug 19, 2026 · Updated Sep 22, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 alsa-lib 0:1.2.16.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 alsa-lib-devel 0:1.2.16.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 alsa-topology 0:1.2.16.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 alsa-ucm 0:1.2.16.1-2.hum1

Vulnerabilities 2

  • Medium 6.8
    CVE-2026-56109

    ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c

    The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compou…

    alsa-project alsa-lib alsa-lib alsa-lib Debian Ubuntu Azure Linux
  • Medium 4.4
    CVE-2026-90781 Public exploit

    alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

    alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier…

    alsa-project alsa-lib alsa-lib alsa-lib Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-56109
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-90781
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40573.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2491439
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-56109
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-56109
  • article
    https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0
  • article
    https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1
  • article
    https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/
  • article
    https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532707
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-90781
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-90781
  • article
    https://github.com/alsa-project/alsa-lib
  • article
    https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241
  • article
    https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020
  • article
    https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/
  • article
    https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse