44 matches found
CVE-2026-97929
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...
CVE-2026-98066
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering an initialization failure. The issue stems from improper resource management in t...
CVE-2026-98006
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. During device initialization failures, the driver prematurely releases memory structures used for USB communication while they remain queued in the host controller. An attacker connecting a craft...
CVE-2026-93808
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. When processing endpoint reply messages, the driver fails to validate the length of received USB data buffers before reading fixed offsets. A physically present attacker connecting a crafted USB...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73134
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69413
CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
PT-2026-87495
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
PT-2026-87575
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-80816 ALSA: FCP: Use a private URB for the notification endpoint
In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...
PT-2026-79644
In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture urb complete resubmits each capture URB without anchoring it: usb get urburb; ret = usb submit urburb, GFP ATOMIC; Anchoring is a property of a submission, not of th...
CVE-2026-74499
A flaw was found in the kernel's Advanced Linux Sound Architecture ALSA USB audio driver. An integer overflow vulnerability in the sndusbmidiakaioutput function, when processing data from a USB device with a small bulk-OUT endpoint, can lead to an out-of-bounds write in the kernel heap. A local...
AlmaLinux 10 : kernel (ALSA-2026:2721)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2721 advisory. kernel: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans CVE-2023-53034 kernel: Linux kernel erofs: Use-After-Free due to device type...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper calculation of the number of frames in the USB audio driver, potentially leading to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002554)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002554 advisory. The createfixedstreamquirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Properly terminating the timer upon removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call being made. This leaves the timer in an active...
SUSE CVE-2025-40269
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each packet size is determined dynamically. The packet sizes are limited by so...