NetSight
IP …
medium5.5

CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() …

Impact

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to validate cs_desc->wLength itself, which may lead to potential endless loop by a malformed descriptor. Add a proper size check to abort the loop for plugging the hole.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4.297 before 5.5
from 5.10.241 before 5.10.258
from 5.15.190 before 5.15.209
from 6.1.149 before 6.1.175
from 6.6.103 before 6.6.140
from 6.12.43 before 6.12.88

Weakness classification

CWE-835

References