From 5f2d0ad996ccb973a5b25d8fc63c8c168e44c684 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sat, 22 Aug 2026 22:01:29 +0200 Subject: [PATCH] alsa-lib: patch CVE-2026-56109 Pick patch listed in NVD CVE report. (From OE-Core rev: 1f7cd9a1c65bfc1a4dbba3830d7092acf02174fd) Signed-off-by: Peter Marko Signed-off-by: Yoann Congal Signed-off-by: Richard Purdie --- .../alsa/alsa-lib/CVE-2026-56109.patch | 33 +++++++++++++++++++ .../alsa/alsa-lib_1.2.11.bb | 1 + 2 files changed, 34 insertions(+) create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch diff --git a/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch b/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch new file mode 100644 index 0000000000..6189d46e5d --- /dev/null +++ b/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch @@ -0,0 +1,33 @@ +From 536dd6f8affdf5197c12a63a71c92a70b2833cc0 Mon Sep 17 00:00:00 2001 +From: Jaroslav Kysela +Date: Mon, 8 Jun 2026 14:33:19 +0200 +Subject: [PATCH] conf: add missing return value check in parse_def() + +A malformed configuration may cause SIGSEGV. + +Link: https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/ +Reported-by: Luigino Camastra +Signed-off-by: Jaroslav Kysela + +CVE: CVE-2026-56109 +Upstream-Status: Backport [https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0] +Signed-off-by: Peter Marko +--- + src/conf.c | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/src/conf.c b/src/conf.c +index b0dd6298..e1dba23d 100644 +--- a/src/conf.c ++++ b/src/conf.c +@@ -1477,6 +1477,10 @@ static int parse_def(snd_config_t *parent, input_t *input, int skip, int overrid + endchr = ']'; + } + c = get_nonwhite(input); ++ if (c < 0) { ++ err = c; ++ goto __end; ++ } + if (c != endchr) { + if (n) + snd_config_delete(n); diff --git a/meta/recipes-multimedia/alsa/alsa-lib_1.2.11.bb b/meta/recipes-multimedia/alsa/alsa-lib_1.2.11.bb index e86239ff87..068a727c67 100644 --- a/meta/recipes-multimedia/alsa/alsa-lib_1.2.11.bb +++ b/meta/recipes-multimedia/alsa/alsa-lib_1.2.11.bb @@ -12,6 +12,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=a916467b91076e631dd8edb7424769c7 \ SRC_URI = "https://www.alsa-project.org/files/pub/lib/${BP}.tar.bz2 \ file://0001-topology-correct-version-script-path.patch \ file://CVE-2026-25068.patch \ + file://CVE-2026-56109.patch \ " SRC_URI[sha256sum] = "9f3f2f69b995f9ad37359072fbc69a3a88bfba081fc83e9be30e14662795bb4d"