In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES

parse_uac2_sample_rate_range() caps the number of enumerated
rates at MAX_NR_RATES, but it only breaks out of the current
rate loop. A malformed UAC2 RANGE response with additional
triplets continues parsing the remaining triplets and repeatedly
prints "invalid uac2 rates" while probe still holds
register_mutex.

Stop the whole parse once the cap is reached and return the
number of rates collected so far.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
4fa0e81b83503900be277e6273a79651b375e288 affected < ab5ba9fd138758ddc50222264ff246b31e397abf
4fa0e81b83503900be277e6273a79651b375e288 affected < ba036305323814ec1f8655313b2fa6a0f7048716
4fa0e81b83503900be277e6273a79651b375e288 affected < 4d7893a137eadb6163ea4298bf67d74b811d76ef
4fa0e81b83503900be277e6273a79651b375e288 affected < a0b78639ef09b2e77974a3de3b1c07f6de3c5e56
4fa0e81b83503900be277e6273a79651b375e288 affected < 3c318f97dcc50b2e0556a1813bd6958678e881fd
44f059fb742aac78cffdab5e0d8fe0c9910c1ded affected —
c25a53781f61c78bf2a2fa308bbd35b42ba346f6 affected —
3.0.81 affected < 3.1
3.2.47 affected < 3.3
Linux Linux affected
Version Status Constraints
3.3 affected —
0 unaffected < 3.3
6.6.140 unaffected ≤ 6.6.*
6.12.86 unaffected ≤ 6.12.*
6.18.27 unaffected ≤ 6.18.*
7.0.4 unaffected ≤ 7.0.*
7.1-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd cve-icon cve-icon
https://git.kernel.org/stable/c/4d7893a137eadb6163ea4298bf67d74b811d76ef cve-icon cve-icon
https://git.kernel.org/stable/c/a0b78639ef09b2e77974a3de3b1c07f6de3c5e56 cve-icon cve-icon
https://git.kernel.org/stable/c/ab5ba9fd138758ddc50222264ff246b31e397abf cve-icon cve-icon
https://git.kernel.org/stable/c/ba036305323814ec1f8655313b2fa6a0f7048716 cve-icon cve-icon
History

Wed, 27 May 2026 19:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.
Title ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:56:19.588Z

Reserved: 2026-05-13T15:03:33.092Z

Link: CVE-2026-46018

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:20.240

Modified: 2026-05-27T14:48:03.013

Link: CVE-2026-46018

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T18:45:39Z

Weaknesses