CVE-2026-97929

Status: UPDATED  |  Advisory ID: CVE-2026-97929

Key Details

Affected Products, Subsystems & Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usbusx2y: validate URB actual_length in interrupt callback

i_usx2y_in04_int() processes the interrupt URB data without checking

urb->actual_length. A short transfer from a malfunctioning device

would cause the handler to process uninitialized heap data from the

kmalloc-allocated in04_buf, which is then copied to the mmap-accessible

ctl_snapshot[] array.

Fix by using kzalloc() for in04_buf to zero-initialize the buffer,

and adding an actual_length check to skip processing on short

transfers while still resubmitting the URB. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References