alsa usb-audio

CVE-2026-46146 is a Linux kernel vulnerability published by NVD on May 28, 2026, covering an ALSA USB-audio bug in convert_chmap_v3() where a malformed USB Audio Class 3 descriptor could trigger a potential endless loop during channel-map parsing. The fix is tiny, but the lesson is not: kernel...

CVE-2026-46018 is a Linux kernel flaw disclosed by kernel.org and published by NVD on May 27, 2026, affecting the ALSA USB-audio driver’s handling of malformed USB Audio Class 2 sample-rate range responses. It is not the sort of vulnerability that screams for emergency unplugging of every...

This vulnerability is a reminder that even mature kernel subsystems can still fail in subtle, arithmetic-driven ways when device timing, packet sizing, and buffer math collide. CVE-2026-23208 affects the Linux kernel’s ALSA USB-audio path and was fixed after researchers and fuzzing...