CVE-2026-98741

The Linux kernel ALSA driver for ua101 is vulnerable to a slab-out-of-bounds write in start_usb_playback() located in sound/usb/misc/ua101.c. The root cause is that detect_usb_format() fails to validate the relationship between wMaxPacketSize and bNrChannels across capture and playback interfaces...