CVE Explorer

CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to validate cs_desc->wLength itself, which may lead to potential endless loop by a malformed descriptor. Add a proper size check to abort the loop for plugging the hole.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:718c1a9e5384d4b4ba0712c871b866ea72b93c2108e7544b6e26fba9d51e7a8f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/stream.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"076d5d13eb9c1ad259a7f246149f6676c62285f9","status":"affected","version":"786571b10b1ae6d90e1242848ce78ee7e1d493c4","versionType":"git"},{"lessThan":"316aa0b1e3c5600eae5ab876394c1ac70e6db581","status":"affected","version":"275e37532e8ebe25e8a4069b2d9f955bfd202a46","versionType":"git"},{"lessThan":"24a40df79307ca7ca0eec0889361cf6ac146d72a","status":"affected","version":"47ab3d820cb0a502bd0074f83bb…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/stream.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.17"},{"lessThan":"6.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOr…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/076d5d13eb9c1ad259a7f246149f6676c62285f9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/24a40df79307ca7ca0eec0889361cf6ac146d72a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/316aa0b1e3c5600eae5ab876394c1ac70e6db581"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/4e0ee232ebe3df04874125d7c7f3e6c25ea5483d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/6e7247d8f5fefeceb0bb9cc80a5388a636b219cd"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/be09b47ed8677d76962e3240c145502e2ad9f3c8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/e0e3dcf48189603f3865f1a0b799b3b42baae96d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/fa5b19ce69067874b1413f3c2027563bae8c2cb3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:133198c195254ea231f1d7d8b06e40b0812baf8104d8f9f041bf3387a9081900 · sha256:1bad5f30228870df… · /containers/cna/references/6

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer