[ CVE-2026-97929 · Published 25 Sep 2026 ]
Vulnerability in Linux
[ Description ]Official description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actual_length in interrupt callback i_usx2y_in04_int() processes the interrupt URB data without checking urb->actual_length. A short transfer from a malfunctioning device would cause the handler to process uninitialized heap data from the kmalloc-allocated in04_buf, which is then copied to the mmap-accessible ctl_snapshot[] array. Fix by using kzalloc() for in04_buf to zero-initialize the buffer, and adding an actual_length check to skip processing on short transfers while still resubmitting the URB.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1289
Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.
-
CERT-FRCERTFR-2026-AVI-1253
Multiple vulnerabilities in the Debian Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Debian Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.
-
BSI CERT-BundWID-SEC-2026-3579
Linux Kernel: Multiple vulnerabilities Translated from German
[ References ]References
- git.kernel.org/stable/c/2770321b358658e0a39fe39ccf6a91ee97a81931
- git.kernel.org/stable/c/8f5ef203abda9dd36b2af473c7b737d544f807bd
- git.kernel.org/stable/c/b0c30fe6c0d5902bd8a7d1d5720bead5bbe46f7d
- git.kernel.org/stable/c/c156584999bf15118f523ef6c6fedc5b21f46bd9
- git.kernel.org/stable/c/c3576cb77b527f223cf2b9fc2b2e9af5e7adee25