CVE-2026-93056

usb: gadget: f_uac1_legacy: remove broken string configfs attributes

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_uac1_legacy: remove broken string configfs attributes

The UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for the fn_play, fn_cap, and fn_cntl string options. The store function contains an inverted null check on the kstrndup() return value.

This means every write attempt returns -ENOMEM on success and dereferences a NULL pointer on allocation failure. The attributes have been broken and unused for many years.

Remove the UAC1_STR_ATTRIBUTE macro and the three attributes it generated. The internal defaults (FILE_PCM_PLAYBACK, FILE_PCM_CAPTURE, FILE_CONTROL) set in f_audio_alloc_inst() are unaffected.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 745adfe6c337f3d5d7737d57529d14a208151b45Affected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 6351ba62778f72dc4f6bc18bfa99e618829cff0dAffected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 021b58ac3e58cffa68ed9585ff492a19e98414f6Affected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7Affected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 8b9335aec93975bb9186d63993a5a610e5066ffcAffected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 2ed25c9d4400cf90d9201657963a231c27a5ea57Affected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 977659adb341f6e30fb00dcf183f63f29df879e2Affected 0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 590d74ec8f488e06b9f1c0f8f0941f45531f3a55Affected
LinuxLinux	3.18Affected before 3.18Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 745adfe6c337f3d5d7737d57529d14a208151b45Affected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 6351ba62778f72dc4f6bc18bfa99e618829cff0dAffected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 021b58ac3e58cffa68ed9585ff492a19e98414f6Affected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7Affected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 8b9335aec93975bb9186d63993a5a610e5066ffcAffected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 2ed25c9d4400cf90d9201657963a231c27a5ea57Affected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 977659adb341f6e30fb00dcf183f63f29df879e2Affected
0854611a19ae4dfa56569e6f640017a1d2dd3312 to before 590d74ec8f488e06b9f1c0f8f0941f45531f3a55Affected

LinuxLinux

3.18Affected
before 3.18Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.