CVE-2011-1169: Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI dr...

Security readout for executives and security teams

CVE-2011-1169 is a Linux kernel flaw in the AudioScience HPI sound driver. A local user could provide a crafted adapter index that corrupts kernel memory, causing a crash or possibly gaining higher privileges. It is old and local-only, but risky on legacy systems using this driver. Exposure is most likely on legacy Linux systems before kernel 2.6.38.1 where the AudioScience HPI driver is present and reachable by local users. Modern supported distributions are unlikely to be exposed unless running very old or unpatched kernels. Prioritize remediation for legacy, shared, or business-critical Linux hosts using AudioScience HPI hardware. This is not shown as actively exploited, but kernel memory corruption with possible privilege gain should not remain on supported assets. Mitigation focus: Upgrade to a kernel containing the 2.6.38.1-era fix or later vendor backport.; Check your Linux vendor advisory for package-specific patched versions.; Remove or disable the AudioScience HPI driver if unused, following vendor guidance..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.