EN

Tracker / CVE-2026-23318

CVE-2026-23318

Alta 7.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validators table for UAC3 AC header descriptor is defined with the wrong protocol version UAC_VERSION_2, while it should have been UAC_VERSION_3. This results in the validator never matching for actual UAC3 devices (protocol == UAC_VERSION_3), causing their header descriptors to bypass validation entirely. A malicious USB device presenting a truncated UAC3 header could exploit this to cause out-of-bounds reads when the driver later accesses unvalidated descriptor fields. The bug was introduced in the same commit as the recently fixed UAC3 feature unit sub-type typo, and appears to be from the same copy-paste error when the UAC3 section was created from the UAC2 section.

Prodotti e versioni affette

linux linux_kernel
linux linux_kernel · 4.19.84 → 4.20
linux linux_kernel · 5.11 → 5.15.203
linux linux_kernel · 5.16 → 6.1.167
linux linux_kernel · 5.3.11 → 5.4
linux linux_kernel · 5.4.1 → 5.10.253
linux linux_kernel · 6.13 → 6.18.17
linux linux_kernel · 6.19 → 6.19.7
linux linux_kernel · 6.2 → 6.6.130
linux linux_kernel · 6.7 → 6.12.77

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti