Tracker / CVE-2026-52963
CVE-2026-52963
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_get_ms_info() validates the internal MIDIStreaming endpoint descriptor size before using baAssocJackID[], but the descriptor walker can still return a class-specific endpoint descriptor whose bLength exceeds the remaining bytes in the endpoint-extra scan. That leaves later flexible-array reads bounded by bLength, but not by the remaining bytes in the endpoint-extra scan. Stop walking when bLength is zero or extends past the remaining endpoint-extra scan.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 4.14.200 → 4.15 |
| linux | linux_kernel · 4.19.149 → 4.20 |
| linux | linux_kernel · 4.4.238 → 4.5 |
| linux | linux_kernel · 4.9.238 → 4.10 |
| linux | linux_kernel · 5.11 → 5.15.209 |
| linux | linux_kernel · 5.16 → 6.1.175 |
| linux | linux_kernel · 5.4.69 → 5.5 |
| linux | linux_kernel · 5.7 → 5.10.258 |
| linux | linux_kernel · 6.13 → 6.18.33 |
| linux | linux_kernel · 6.19 → 7.0.10 |
| linux | linux_kernel · 6.2 → 6.6.141 |
| linux | linux_kernel · 6.7 → 6.12.91 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.