CVE-2026-93808

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA usb-audio caiaq component where the usb ep1 command reply dispatch() function fails to verify that the urb->actual length contains the necessary bytes before reading command-specific items from the URB buffer. Specifically, the function uses buf[0] as a command byte and subsequently accesses buf + 1, buf[1], buf[2], or buf + 3 without proper length validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.