Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces The Scarlett2 mixer quirk in USB-audio driver may hit a NULL dereference when a malformed USB descriptor is passed, since it assumes the presence of an endpoint in the parsed interface in scarlett2_find_fc_interface(), as reported by fuzzer. For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.
Засегнати продукти
- Linux Linux: 6c0a2078134aba6a77291554035304df9e16b85c преди b014cc945baba75816cda0cf8934be87c9ed4947; 6c0a2078134aba6a77291554035304df9e16b85c преди c5c5a6c53cf3b658f1d4512dfa61f3cd25bc34ba; 6c0a2078134aba6a77291554035304df9e16b85c преди b267255c15d2a5b90c4e926146aa155e5161e264; 6c0a2078134aba6a77291554035304df9e16b85c преди 3d542cf3c4c854cdf5d58049771f68926b9eb2b9; 6c0a2078134aba6a77291554035304df9e16b85c преди 3d4f23885e4b90347c9a1d779af6e79a99b5172a; 6c0a2078134aba6a77291554035304df9e16b85c преди df1d8abf36ca3681c21a6809eaa9a1e01ef897a6
- Linux Linux: 5.14; преди 5.14; 6.1.167 до 6.1.*; 6.6.130 до 6.6.*; 6.12.78 до 6.12.*; 6.18.19 до 6.18.*; 6.19.9 до 6.19.*; от 7.0 нататък
История
- 8 май 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-43436
- https://nvd.nist.gov/vuln/detail/CVE-2026-43436
- https://git.kernel.org/stable/c/b014cc945baba75816cda0cf8934be87c9ed4947
- https://git.kernel.org/stable/c/c5c5a6c53cf3b658f1d4512dfa61f3cd25bc34ba
- https://git.kernel.org/stable/c/b267255c15d2a5b90c4e926146aa155e5161e264
- https://git.kernel.org/stable/c/3d542cf3c4c854cdf5d58049771f68926b9eb2b9
- https://git.kernel.org/stable/c/3d4f23885e4b90347c9a1d779af6e79a99b5172a
- https://git.kernel.org/stable/c/df1d8abf36ca3681c21a6809eaa9a1e01ef897a6