Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-46018

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.2%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-46018


Contact Us

Shodan ® - All rights reserved