Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23208

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number of frames In this case, the user constructed the parameters with maxpacksize 40 for rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buffer size for each data URB is maxpacksize * packets, which in this example is 40 * 6 = 240; When the user performs a write operation to send audio data into the ALSA PCM playback stream, the calculated number of frames is packsize[0] * pac
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3d639d51376771ac9368cb93fbcde73a7c7b2f766e27fae55e09938c20de91b1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/pcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.4.*","status":"unaffected","version":"4.4.230","versionType":"semver"},{"lessThanOrEqual":"4.9.*","status":"unaffected","version":"4.9.230","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.188","versionType":"semver"},{"lessThanOrEqual":…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/pcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"480a1490c595a242f27493a4544b3efb21b29f6a","status":"affected","version":"02c56650f3c118d3752122996d96173d26bb13aa","versionType":"git"},{"lessThan":"ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41","status":"affected","version":"5ef30e443e6d3654cccecec99cf481a69a0a6d3b","versionType":"git"},{"lessThan":"282aba56713bbc58155716b55ca7222b2d9cf3c8","status":"affected","version":"99703c921864a318e3e8aae74fde07…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/pcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.4.*","status":"unaffected","version":"4.4.230","versionType":"semver"},{"lessThanOrEqual":"4.9.*","status":"unaffected","version":"4.9.230","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.188","versionType":"semver"},{"lessThanOrEqual":…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/pcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"480a1490c595a242f27493a4544b3efb21b29f6a","status":"affected","version":"02c56650f3c118d3752122996d96173d26bb13aa","versionType":"git"},{"lessThan":"ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41","status":"affected","version":"5ef30e443e6d3654cccecec99cf481a69a0a6d3b","versionType":"git"},{"lessThan":"282aba56713bbc58155716b55ca7222b2d9cf3c8","status":"affected","version":"99703c921864a318e3e8aae74fde07…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/282aba56713bbc58155716b55ca7222b2d9cf3c8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/480a1490c595a242f27493a4544b3efb21b29f6a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/62932d9ed639a9fa71b4ac1a56766a4b43abb7e4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c4dc012b027c9eb101583011089dea14d744e314"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d67dde02049e632ba58d3c44a164a74b6a737154"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/e0ed5a36fb3ab9e7b9ee45cd17f09f6d5f594360"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/ef5749ef8b307bf8717945701b1b79d036af0a15"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:aaf4778fa568aa2898b8f7219e43dbd7c68275bc1e8ac81a83cce37f9e1dc79e · sha256:df532d7fbda332e7… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer