Skip to content
OpenAdvisories
Medium RHSA-2026:7401 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 alsa-lib 0:1.2.15.3-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 alsa-lib-devel 0:1.2.15.3-3.1.hum1

Vulnerabilities 1

  • Medium 4.6
    CVE-2026-25068

    alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow

    alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and use…

    alsa-project alsa-lib alsa-lib alsa-lib Debian Ubuntu Azure Linux

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-25068
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7401.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2435372
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-25068
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-25068
  • article
    https://github.com/alsa-project/alsa-lib/commit/5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40
  • article
    https://www.vulncheck.com/advisories/alsa-lib-topology-decoder-heap-based-buffer-overflow