CVE-2026-52963

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA usb-audio component where the snd usbmidi get ms info() function fails to properly bound MIDI endpoint descriptor scans. While the function validates the internal MIDIStreaming endpoint descriptor size before accessing baAssocJackID[], the descriptor walker may return a class-specific endpoint descriptor with a bLength that exceeds the remaining bytes in the endpoint-extra scan. This allows subsequent flexible-array reads to be bounded by bLength rather than the actual remaining bytes in the scan.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.