CVE-2026-98769 usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: validate bRequest index in genericset,getcmd genericsetcmd and genericgetcmd use the low nibble of ctrl-bRequest as an index into con-data: u8 cmd = ctrl-bRequest & 0x0F; / 0 .. 15 / ... con-datacmd =...

CVE-2026-98769 usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: validate bRequest index in genericset,getcmd genericsetcmd and genericgetcmd use the low nibble of ctrl-bRequest as an index into con-data: u8 cmd = ctrl-bRequest & 0x0F; / 0 .. 15 / ... con-datacmd =...

CVE-2026-98769

The Linux kernel contains an out-of-bounds access vulnerability in the usb: gadget: f_uac1_legacy component. The functions generic_set_cmd() and generic_get_cmd() incorrectly use the low nibble of ctrl->bRequest as an index into the con->data[] array. Because struct usb_audio_control define...