PT-2026-44269
CVE-2026-46146
·
Published
2026-05-28
·
Updated
2026-10-18
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the ALSA usb-audio component within the
convert chmap v3() function. The function contains a loop that uses the cs desc->wLength variable to determine the increment size. Because the cs desc->wLength value is not validated, a malformed descriptor can trigger an endless loop.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾