CVE Explorer

CVE-2026-23078

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count > 1. The code checks `if (size == 2)` where `size` is the total buffer size in bytes, then loops `count` times treating each element as u16 (2 bytes). This causes the loop to access `count * 2` bytes when the buffer only has `size` bytes

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6da832d2bc820c8f19ae348844ca2aaa3b20a55db8cf0893316e95a103ca1558

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/mixer_scarlett2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.122","versionType":"semver"},{"les…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/mixer_scarlett2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d5e80d1f97ae55bcea1426f551e4419245b41b9c","status":"affected","version":"ac34df733d2dfe3b553897a1e9e1a44414f09834","versionType":"git"},{"lessThan":"51049f6e3f05d70660e2458ad3bb302a3721b751","status":"affected","version":"ac34df733d2dfe3b553897a1e9e1a44414f09834","versionType":"git"},{"lessThan":"91a756d22f0482eac5bedb113c8922f90b254449","status":"affected","version":"ac34df733d2dfe3b55…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/27049f50be9f5ae3a62d272128ce0b381cb26a24"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/31a3eba5c265a763260976674a22851e83128f6d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/51049f6e3f05d70660e2458ad3bb302a3721b751"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6f5c69f72e50d51be3a8c028ae7eda42c82902cb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/91a756d22f0482eac5bedb113c8922f90b254449"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/d5e80d1f97ae55bcea1426f551e4419245b41b9c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:07b3218c37f5bf49e7d367cd3c6ab6511d05a165590c4e02ef0f204dc4e3b4ad · sha256:0409108c1b4b24ec… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer