PT-2026-39097 · Linux · Linux Kernel

Jann Horn · CVE-2026-43436 · Published 2026-05-08 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference can occur in the USB-audio driver's Scarlett2 mixer quirk when processing a malformed USB descriptor. This happens because the scarlett2 find fc interface() function assumes an endpoint exists in the parsed interface without verification.

Recommendations Apply the update that implements a sanity check for bNumEndpoints to skip invalid interfaces.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-43436

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8619-1

Affected Products

Linux Kernel

References · 2320

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43436.json · Exploit
• https://ubuntu.com/security/CVE-2026-52962 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31424 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8607-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43502 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23303 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8607-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31696 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43068 · Vendor Advisory