CVE-2026-74497

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA usb-audio component where the snd usb handle sync urb() function scales received sync packet sizes by the sender's stride and stores the result in out packet->packet size[i]. If a connected USB device sends an oversized sync packet, the frame count can exceed ep->maxframesize. This un-clamped frame count propagates to the playback endpoint queue, which may drive packet transfers beyond the hardware frame limits of the endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.