In the Linux kernel, the following vulnerability has been resolved:
ALSA: ctxfi: Limit PTP to a single page
Commit 391e69143d0a increased CT_PTP_NUM from 1 to 4 to support 256
playback streams, but the additional pages are not used by the card
correctly. The CT20K2 hardware already has multiple VMEM_PTPAL
registers, but using them separately would require refactoring the
entire virtual memory allocation logic.
ct_vm_map() always uses PTEs in vm->ptp[0].area regardless of
CT_PTP_NUM. On AMD64 systems, a single PTP covers 512 PTEs (2M). When
aggregate memory allocations exceed this limit, ct_vm_map() tries to
access beyond the allocated space and causes a page fault:
BUG: unable to handle page fault for address: ffffd4ae8a10a000
Oops: Oops: 0002 [#1] SMP PTI
RIP: 0010:ct_vm_map+0x17c/0x280 [snd_ctxfi]
Call Trace:
atc_pcm_playback_prepare+0x225/0x3b0
ct_pcm_playback_prepare+0x38/0x60
snd_pcm_do_prepare+0x2f/0x50
snd_pcm_action_single+0x36/0x90
snd_pcm_action_nonatomic+0xbf/0xd0
snd_pcm_ioctl+0x28/0x40
__x64_sys_ioctl+0x97/0xe0
do_syscall_64+0x81/0x610
entry_SYSCALL_64_after_hwframe+0x76/0x7e
Revert CT_PTP_NUM to 1. The 256 SRC_RESOURCE_NUM and playback_count
remain unchanged.
References
Configurations
Configuration 1 (hide)
|
History
29 Apr 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/365c36e1a126c6aa1aecedd3a351bcabc66f0c29 - Patch | |
| References | () https://git.kernel.org/stable/c/3fd0685d7fef68c2d8a04876bcf9eaa0724ad6a5 - Patch | |
| References | () https://git.kernel.org/stable/c/452894005b4abe141b11fe01e7bfe152e6d3860f - Patch | |
| References | () https://git.kernel.org/stable/c/ad9011a795407093dcf507f6e5da1828987b4b47 - Patch | |
| References | () https://git.kernel.org/stable/c/b7f5ecd13cce8c2f8fa5a84c9aab65997142577e - Patch | |
| References | () https://git.kernel.org/stable/c/e9418da50d9e5c496c22fe392e4ad74c038a94eb - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Linux
Linux linux Kernel |
27 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
27 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Apr 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
24 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-24 15:16
Updated : 2026-04-29 20:16
NVD link : CVE-2026-31602
Mitre link : CVE-2026-31602
CVE.ORG link : CVE-2026-31602
JSON object : View
Products Affected
linux
- linux_kernel
CWE