CVE-2026-46146

🗓️ 28 May 2026 09:36:02Reported by LinuxType

ALSA usb-audio fix: validate wLength in convert_chmap_v3 to avoid endless loop from bad descriptors.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2026-46146	28 May 202609:36	–	attackerkb
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
Cvelist	CVE-2026-46146 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()	28 May 202609:36	–	cvelist
Debian CVE	CVE-2026-46146	28 May 202609:36	–	debiancve
EUVD	EUVD-2026-32773	28 May 202609:36	–	euvd
NVD	CVE-2026-46146	28 May 202610:16	–	nvd
OSV	BELL-CVE-2026-46146	29 May 202606:09	–	osv
OSV	DEBIAN-CVE-2026-46146	28 May 202610:16	–	osv
OSV	ECHO-B8C0-57CE-9542	28 May 202623:19	–	osv
OSV	ROOT-OS-DEBIAN-11-CVE-2026-46146 CVE-2026-46146 in rootio-linux - Patched by Root	31 May 202603:58	–	osv

Vulners

CNA

Node

linux linux_kernelRange5.10.241–5.10.258

linux linux_kernelRange5.15.190–5.15.209

linux linux_kernelRange6.1.149–6.1.175

linux linux_kernelRange6.6.103–6.6.140

linux linux_kernelRange6.12.43–6.12.88

linux linux_kernelRange5.4.297–5.5

linux linux_kernelRange6.15.11–6.16

linux linux_kernelRange6.16.2–6.17

linux linux_kernelRange6.17–5.10.258

linux linux_kernelRange5.11.0–5.15.209

linux linux_kernelRange5.16.0–6.1.175

linux linux_kernelRange6.2.0–6.6.140

linux linux_kernelRange6.7.0–6.12.88

linux linux_kernelRange6.13.0–6.18.30

linux linux_kernelRange6.19.0–7.0.7

linux linux_kernelRange7.1.0–7.1-rc2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/usb/stream.c"
    ],
    "versions": [
      {
        "version": "786571b10b1ae6d90e1242848ce78ee7e1d493c4",
        "lessThan": "076d5d13eb9c1ad259a7f246149f6676c62285f9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "275e37532e8ebe25e8a4069b2d9f955bfd202a46",
        "lessThan": "316aa0b1e3c5600eae5ab876394c1ac70e6db581",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "47ab3d820cb0a502bd0074f83bb3cf7ab5d79902",
        "lessThan": "24a40df79307ca7ca0eec0889361cf6ac146d72a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1034719fdefd26caeec0a44a868bb5a412c2c1a5",
        "lessThan": "e0e3dcf48189603f3865f1a0b799b3b42baae96d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ae17b3b5e753efc239421d186cd1ff06e5ac296e",
        "lessThan": "4e0ee232ebe3df04874125d7c7f3e6c25ea5483d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ecfd41166b72b67d3bdeb88d224ff445f6163869",
        "lessThan": "be09b47ed8677d76962e3240c145502e2ad9f3c8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ecfd41166b72b67d3bdeb88d224ff445f6163869",
        "lessThan": "fa5b19ce69067874b1413f3c2027563bae8c2cb3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ecfd41166b72b67d3bdeb88d224ff445f6163869",
        "lessThan": "6e7247d8f5fefeceb0bb9cc80a5388a636b219cd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "799c06ad4c9c790c265e8b6b94947213f1fb389c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dfdcbcde5c20df878178245d4449feada7d5b201",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7ef3fd250f84494fb2f7871f357808edaa1fc6ce",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.10.241",
        "lessThan": "5.10.258",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.15.190",
        "lessThan": "5.15.209",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.1.149",
        "lessThan": "6.1.175",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.6.103",
        "lessThan": "6.6.140",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.12.43",
        "lessThan": "6.12.88",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.4.297",
        "lessThan": "5.5",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.15.11",
        "lessThan": "6.16",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.16.2",
        "lessThan": "6.17",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/usb/stream.c"
    ],
    "versions": [
      {
        "version": "6.17",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.17",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.88",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.30",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.7",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1-rc2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/24a40df79307ca7ca0eec0889361cf6ac146d72a
git	www.git.kernel.org/stable/c/be09b47ed8677d76962e3240c145502e2ad9f3c8
git	www.git.kernel.org/stable/c/6e7247d8f5fefeceb0bb9cc80a5388a636b219cd
git	www.git.kernel.org/stable/c/316aa0b1e3c5600eae5ab876394c1ac70e6db581
git	www.git.kernel.org/stable/c/e0e3dcf48189603f3865f1a0b799b3b42baae96d
git	www.git.kernel.org/stable/c/4e0ee232ebe3df04874125d7c7f3e6c25ea5483d
git	www.git.kernel.org/stable/c/fa5b19ce69067874b1413f3c2027563bae8c2cb3
git	www.git.kernel.org/stable/c/076d5d13eb9c1ad259a7f246149f6676c62285f9

01 Jun 2026 17:17Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00032