CVE-2026-72446

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA usb-audio qcom component where the handle uaudio stream req() function fails to properly validate the interface index returned by info idx from ifnum() during a stream disable request. When no interface matches, info idx from ifnum() returns -EINVAL, which is then used to calculate a pointer to uadev[].info. This leads to two potential scenarios: if the card was never enabled, it results in a NULL pointer dereference causing a kernel oops; if the card was enabled previously, it leads to an out-of-bounds slab read and a subsequent 4-byte out-of-bounds write to data ep pipe and sync ep pipe, resulting in memory corruption. This condition is reachable by unprivileged local users via AF QIPCRTR.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.