PT-2026-43885 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-46018

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA USB audio component where the parse uac2 sample rate range() function fails to fully terminate parsing when the number of enumerated rates reaches MAX NR RATES. While the function caps the rates, it only exits the current rate loop. A malformed UAC2 RANGE response containing additional triplets causes the system to continue parsing the remaining triplets and repeatedly print "invalid uac2 rates" while the probe still holds the register mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46018

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-46018 · Security Note
• https://twitter.com/windowsforum/status/2059917288824840571 · Twitter Post
• https://git.kernel.org/stable/c/ba036305323814ec1f8655313b2fa6a0f7048716 · Note
• https://git.kernel.org/stable/c/a0b78639ef09b2e77974a3de3b1c07f6de3c5e56 · Note
• https://git.kernel.org/stable/c/ab5ba9fd138758ddc50222264ff246b31e397abf · Note
• https://git.kernel.org/stable/c/4d7893a137eadb6163ea4298bf67d74b811d76ef · Note
• https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd · Note