AZL-102533 CVE-2026-93122 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uac: validate rate list length before storing UAC1 and UAC2 configfs rate-list attributes parse a comma-separated list of sampling rates and store each parsed value in fixed-size arrays. The arrays have UACMAXRATES...

CVE-2026-93122

CVE-2026-93122 is an out-of-bounds write in the Linux kernel's USB gadget UAC drivers (f_uac1.c, f_uac2.c). The UAC1/UAC2 configfs rate-list attributes parse a comma-separated sampling-rate list into fixed-size arrays of UAC_MAX_RATES (10) entries without validating the token count, so an 11th en...