PT-2026-36355 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-06 · CVE-2026-31720

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack out-of-bounds write exists in the f audio complete() function. The issue occurs because the function copies req->length bytes into a 4-byte stack variable using memcpy(). Since req->length is derived from a host-controlled USB request path, a remote host can influence the length to overwrite the stack.

Recommendations Validate req->actual against the expected payload size for supported control selectors and decode only the expected amount of data to avoid copying host-influenced lengths into fixed-size stack objects.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-31720

ECHO-8201-81C8-2BA0

Affected Products

Linux Kernel

References · 17

• https://git.kernel.org/stable/c/c6da4fed7537aec19880c24f6c3a95065adb1406 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31720 · Vendor Advisory
• https://git.kernel.org/stable/c/be2d32f0c3fe333d14c0a9ca90328dacbc3e06b8 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31720 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31720 · Vendor Advisory
• https://git.kernel.org/stable/c/557d1d4e862eccd0b74cc377b66de3e1e8d49605 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31720 · Security Note
• https://git.kernel.org/stable/c/8e5eb1d6e6a3d7bbea9c92132d0cda5793176426 · Patch
• https://git.kernel.org/stable/c/21b11e8581285c6f10ef43d05df349d445f24273 · Patch
• https://git.kernel.org/stable/c/6e0e34d85cd46ceb37d16054e97a373a32770f6c · Patch
• https://git.kernel.org/stable/c/26304d124e7f0383f8fe1168b5801a0ac7e16b1c · Patch
• https://ubuntu.com/security/CVE-2026-31720 · Vendor Advisory
• https://git.kernel.org/stable/c/0d41772d98dcaf6c17e875b7d0ea0154ae1191ee · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31720 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31720 · Vendor Advisory