CVE-2026-43436

🗓️ 08 May 2026 15:16:55Reported by [email protected]Type

Linux kernel ALSA usb-audio Scarlett2: check endpoint counts to prevent null pointer dereference on malformed descriptors.

Reporter	Title	Published	Views	Family All 22
ATTACKERKB	CVE-2026-43436	8 May 202614:22	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	8 May 202600:00	–	cnnvd
CVE	CVE-2026-43436	8 May 202614:22	–	cve
Cvelist	CVE-2026-43436 ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces	8 May 202614:22	–	cvelist
Debian CVE	CVE-2026-43436	8 May 202614:22	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	2 Jul 202600:00	–	oraclelinux
EUVD	EUVD-2026-28742	8 May 202615:31	–	euvd
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50372)	6 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0837	16 Jun 202600:00	–	nessus

NVD

Node

linux linux_kernelRange5.14–6.1.167

linux linux_kernelRange6.2–6.6.130

linux linux_kernelRange6.7–6.12.78

linux linux_kernelRange6.13–6.18.19

linux linux_kernelRange6.19–6.19.9

Source	Link
git	www.git.kernel.org/stable/c/3d4f23885e4b90347c9a1d779af6e79a99b5172a
git	www.git.kernel.org/stable/c/df1d8abf36ca3681c21a6809eaa9a1e01ef897a6
git	www.git.kernel.org/stable/c/b267255c15d2a5b90c4e926146aa155e5161e264
git	www.git.kernel.org/stable/c/c5c5a6c53cf3b658f1d4512dfa61f3cd25bc34ba
git	www.git.kernel.org/stable/c/b014cc945baba75816cda0cf8934be87c9ed4947
git	www.git.kernel.org/stable/c/3d542cf3c4c854cdf5d58049771f68926b9eb2b9

17 Jun 2026 10:49Current

CVSS 3.15.5

EPSS0.00123