---
id: CVE-2026-31776
title: 'ALSA: ctxfi: Fix missing SPDIFI1 index handling'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ALSA: ctxfi: Fix missing SPDIFI1 index handling

  SPDIF1 DAIO type isn't properly handled in daio_device_index() for
  hw20k2, and it returned -EINVAL, which ended up with…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 <
    950decf59d4e978b60a792ce0b3e1555a608f489
  - >-
    Linux >= a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 <
    b045ab3dff97edae6d538eeff900a34c098761f8
  - Linux 6.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:25:16.777707Z'
published: '2026-05-01'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:25.032Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31776'
references:
  - url: 'https://git.kernel.org/stable/c/950decf59d4e978b60a792ce0b3e1555a608f489'
  - url: 'https://git.kernel.org/stable/c/b045ab3dff97edae6d538eeff900a34c098761f8'
tags:
  - cve.org
epss: 0.0012
epssPercentile: 0.01877
ingestedAt: '2026-11-06T15:54:04.046Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ctxfi: Fix missing SPDIFI1 index handling

SPDIF1 DAIO type isn't properly handled in daio_device_index() for
hw20k2, and it returned -EINVAL, which ended up with the out-of-bounds
array access.  Follow the hw20k1 pattern and return the proper index
for this type, too.

## Affected

- `Linux >= a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 < 950decf59d4e978b60a792ce0b3e1555a608f489`
- `Linux >= a2dbaeb5c61ef110ceefe0d48fe94d428d3bcf16 < b045ab3dff97edae6d538eeff900a34c098761f8`
- `Linux 6.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.