CVE-2026-46018 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.
A vulnerability in the Linux kernel's ALSA USB-Audio subsystem has been addressed. The issue arose in the 'parse_uac2_sample_rate_range' function, which limits the number of parsed rates to a maximum defined value. However, the function only exits the current loop, allowing a malformed UAC2 RANGE response with extra triplets to be processed. This oversight could lead to an invalid rate being reported multiple times, causing potential confusion or errors. The vulnerability was reported by a syzbot instance and could have led to a hang or overflow situation.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0da05fedf5e1966b7e7d389866cb86fcf09f4b32 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd | kernel.org | Patch |
| https://git.kernel.org/stable/c/4d7893a137eadb6163ea4298bf67d74b811d76ef | kernel.org | Patch |
| https://git.kernel.org/stable/c/5436bc1b07d4656f99412dc72871d250d7d55205 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a0b78639ef09b2e77974a3de3b1c07f6de3c5e56 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ab5ba9fd138758ddc50222264ff246b31e397abf | kernel.org | Patch |
| https://git.kernel.org/stable/c/ba036305323814ec1f8655313b2fa6a0f7048716 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f14bd323eec4b4f0ef662520ec852e593ece1d4c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.0.81, < 3.1 >= 3.2.47, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.86 >= 6.13, < 6.18.27 >= 6.19, < 7.0.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |