793 matches found
AZL-101543 CVE-2026-90033 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
EUVD-2026-80641
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
CVE-2026-90033 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
Linux Distros Unpatched Vulnerability : CVE-2026-90033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it t...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Remove sndBUGON from sndusbmidioutputopen The function sndusbmidioutputopen includes a check for the NULL port, which involves calling sndBUGON. The use of sndBUGON was intended to prevent such issues from...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed a possible NULL pointer dereferencing in sndusbpcmhasfixedrate. The argument of the subs function may be NULL; therefore, do not use it before a NULL check...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed potential memory leaks When the driver encounters -ENOMEM while allocating a URB or a buffer, it abends and proceeds to the error handling path, releasing all previously allocated resources. However, when...
CVE-2026-89736
A flaw was found in the Linux kernel's USB audio gadget driver uaudio. This vulnerability occurs during sound card disconnection when Asynchronous Linux Sound Architecture ALSA control elements kctls remain open in userspace. A local attacker can exploit this timing issue by interacting with thes...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69687
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69571
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69469
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69413
Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69286
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
CVE-2026-69270
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...
EUVD-2026-73578
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...