# CVE-2026-25068: alsa-lib: alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow i...

CVE-2026-25068 is fixed in 12 products on 1 platform, first by libasound2 1.2.2-2.1ubuntu2.5+esm1, released January 29, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-25068
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0020
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 29, 2026

## Description

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | alsa-lib Debian 11.6 (bullseye) | 1.2.4-1.1+deb11u1 | [DLA-4469-1](https://patchblox.com/security/data/fix/linux/dla-4469-1.md) | Feb 5, 2026 |
| Linux | alsa-lib Debian 13.5 (trixie) | 1.2.14-1+deb13u1 | [DEBIAN-CVE-2026-25068](https://patchblox.com/security/data/fix/linux/debian-cve-2026-25068.md) | Jan 29, 2026 |
| Linux | alsa-lib Debian 14 | 1.2.16-1 | [DEBIAN-CVE-2026-25068](https://patchblox.com/security/data/fix/linux/debian-cve-2026-25068.md) | Jan 29, 2026 |
| Linux | alsa-lib amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | alsa-lib-debuginfo amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | alsa-lib-debugsource amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | alsa-lib-devel amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | alsa-topology amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | alsa-ucm amzn 2023 | 1.2.7.2-1.amzn2023.0.3 | [ALAS2023-2026-1426](https://patchblox.com/security/data/fix/linux/alas2023-2026-1426.md) | Feb 16, 2026 |
| Linux | libasound2 Ubuntu 20.04 LTS (focal) | 1.2.2-2.1ubuntu2.5+esm1 | [libasound2 1.2.2-2.1ubuntu2.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libasound2-1.2.2-2.1ubuntu2.5-esm1.md) | Jan 29, 2026 |
| Linux | libasound2 Ubuntu 22.04.1 LTS (jammy) | 1.2.6.1-1ubuntu1.1 | [libasound2 1.2.6.1-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libasound2-1.2.6.1-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2-data Ubuntu 20.04 LTS (focal) | 1.2.2-2.1ubuntu2.5+esm1 | [libasound2-data 1.2.2-2.1ubuntu2.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libasound2-data-1.2.2-2.1ubuntu2.5-esm1.md) | Jan 29, 2026 |
| Linux | libasound2-data Ubuntu 22.04.1 LTS (jammy) | 1.2.6.1-1ubuntu1.1 | [libasound2-data 1.2.6.1-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libasound2-data-1.2.6.1-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2-data Ubuntu 24.04.5 LTS (noble) | 1.2.11-1ubuntu0.2 | [libasound2-data 1.2.11-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libasound2-data-1.2.11-1ubuntu0.2.md) | Jan 29, 2026 |
| Linux | libasound2-data Ubuntu 25.10 (questing) | 1.2.14-1ubuntu1.1 | [libasound2-data 1.2.14-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libasound2-data-1.2.14-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2-data Ubuntu 26.04.1 LTS (resolute) | 1.2.15.3-1ubuntu1 | [libasound2-data 1.2.15.3-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libasound2-data-1.2.15.3-1ubuntu1.md) | Jan 29, 2026 |
| Linux | libasound2-plugin-smixer Ubuntu 20.04 LTS (focal) | 1.2.2-2.1ubuntu2.5+esm1 | [libasound2-plugin-smixer 1.2.2-2.1ubuntu2.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libasound2-plugin-smixer-1.2.2-2.1ubuntu2.5-esm1.md) | Jan 29, 2026 |
| Linux | libasound2-plugin-smixer Ubuntu 22.04.1 LTS (jammy) | 1.2.6.1-1ubuntu1.1 | [libasound2-plugin-smixer 1.2.6.1-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libasound2-plugin-smixer-1.2.6.1-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2-plugin-smixer Ubuntu 24.04.5 LTS (noble) | 1.2.11-1ubuntu0.2 | [libasound2-plugin-smixer 1.2.11-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libasound2-plugin-smixer-1.2.11-1ubuntu0.2.md) | Jan 29, 2026 |
| Linux | libasound2-plugin-smixer Ubuntu 25.10 (questing) | 1.2.14-1ubuntu1.1 | [libasound2-plugin-smixer 1.2.14-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libasound2-plugin-smixer-1.2.14-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2-plugin-smixer Ubuntu 26.04.1 LTS (resolute) | 1.2.15.3-1ubuntu1 | [libasound2-plugin-smixer 1.2.15.3-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libasound2-plugin-smixer-1.2.15.3-1ubuntu1.md) | Jan 29, 2026 |
| Linux | libasound2t64 Ubuntu 24.04.5 LTS (noble) | 1.2.11-1ubuntu0.2 | [libasound2t64 1.2.11-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libasound2t64-1.2.11-1ubuntu0.2.md) | Jan 29, 2026 |
| Linux | libasound2t64 Ubuntu 25.10 (questing) | 1.2.14-1ubuntu1.1 | [libasound2t64 1.2.14-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libasound2t64-1.2.14-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libasound2t64 Ubuntu 26.04.1 LTS (resolute) | 1.2.15.3-1ubuntu1 | [libasound2t64 1.2.15.3-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libasound2t64-1.2.15.3-1ubuntu1.md) | Jan 29, 2026 |
| Linux | libatopology2 Ubuntu 20.04 LTS (focal) | 1.2.2-2.1ubuntu2.5+esm1 | [libatopology2 1.2.2-2.1ubuntu2.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libatopology2-1.2.2-2.1ubuntu2.5-esm1.md) | Jan 29, 2026 |
| Linux | libatopology2 Ubuntu 22.04.1 LTS (jammy) | 1.2.6.1-1ubuntu1.1 | [libatopology2 1.2.6.1-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libatopology2-1.2.6.1-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libatopology2t64 Ubuntu 24.04.5 LTS (noble) | 1.2.11-1ubuntu0.2 | [libatopology2t64 1.2.11-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libatopology2t64-1.2.11-1ubuntu0.2.md) | Jan 29, 2026 |
| Linux | libatopology2t64 Ubuntu 25.10 (questing) | 1.2.14-1ubuntu1.1 | [libatopology2t64 1.2.14-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libatopology2t64-1.2.14-1ubuntu1.1.md) | Jan 29, 2026 |
| Linux | libatopology2t64 Ubuntu 26.04.1 LTS (resolute) | 1.2.15.3-1ubuntu1 | [libatopology2t64 1.2.15.3-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libatopology2t64-1.2.15.3-1ubuntu1.md) | Jan 29, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.