CVE-2026-46018

ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Oct 15, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES

parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex.

Stop the whole parse once the cap is reached and return the number of rates collected so far.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4fa0e81b83503900be277e6273a79651b375e288 to before 5436bc1b07d4656f99412dc72871d250d7d55205Affected 4fa0e81b83503900be277e6273a79651b375e288 to before 0da05fedf5e1966b7e7d389866cb86fcf09f4b32Affected 4fa0e81b83503900be277e6273a79651b375e288 to before f14bd323eec4b4f0ef662520ec852e593ece1d4cAffected 4fa0e81b83503900be277e6273a79651b375e288 to before ab5ba9fd138758ddc50222264ff246b31e397abfAffected 4fa0e81b83503900be277e6273a79651b375e288 to before ba036305323814ec1f8655313b2fa6a0f7048716Affected 4fa0e81b83503900be277e6273a79651b375e288 to before 4d7893a137eadb6163ea4298bf67d74b811d76efAffected 4fa0e81b83503900be277e6273a79651b375e288 to before a0b78639ef09b2e77974a3de3b1c07f6de3c5e56Affected 4fa0e81b83503900be277e6273a79651b375e288 to before 3c318f97dcc50b2e0556a1813bd6958678e881fdAffected 44f059fb742aac78cffdab5e0d8fe0c9910c1dedAffected c25a53781f61c78bf2a2fa308bbd35b42ba346f6Affected 3.0.81 to before 3.1Affected 3.2.47 to before 3.3Affected
LinuxLinux	3.3Affected before 3.3Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

4fa0e81b83503900be277e6273a79651b375e288 to before 5436bc1b07d4656f99412dc72871d250d7d55205Affected
4fa0e81b83503900be277e6273a79651b375e288 to before 0da05fedf5e1966b7e7d389866cb86fcf09f4b32Affected
4fa0e81b83503900be277e6273a79651b375e288 to before f14bd323eec4b4f0ef662520ec852e593ece1d4cAffected
4fa0e81b83503900be277e6273a79651b375e288 to before ab5ba9fd138758ddc50222264ff246b31e397abfAffected
4fa0e81b83503900be277e6273a79651b375e288 to before ba036305323814ec1f8655313b2fa6a0f7048716Affected
4fa0e81b83503900be277e6273a79651b375e288 to before 4d7893a137eadb6163ea4298bf67d74b811d76efAffected
4fa0e81b83503900be277e6273a79651b375e288 to before a0b78639ef09b2e77974a3de3b1c07f6de3c5e56Affected
4fa0e81b83503900be277e6273a79651b375e288 to before 3c318f97dcc50b2e0556a1813bd6958678e881fdAffected
44f059fb742aac78cffdab5e0d8fe0c9910c1dedAffected
c25a53781f61c78bf2a2fa308bbd35b42ba346f6Affected
3.0.81 to before 3.1Affected
3.2.47 to before 3.3Affected

LinuxLinux

3.3Affected
before 3.3Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.