CVE-2026-93122

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An array-index-out-of-bounds issue exists in the UAC1 and UAC2 configfs rate-list attributes. The system parses a comma-separated list of sampling rates and stores them in fixed-size arrays. Because the store paths fail to validate that the input contains no more than the maximum allowed entries, providing more than ten rates allows writing past the end of the p srates[] or c srates[] arrays within the f uac1 opts or f uac2 opts structures. This occurs in the f uac1 opts p srate store() and f uac2 opts p srate store() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.