Skip to main content
CVE-2026-122113VulnerabilityPublished

Realtek's RtUsbA64.sys USB audio driver

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-122113· Medium

Not known to be exploited.

Data as of 6 Nov 2026, 22:48 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Affected software

ProductAffectedFixed in
RealtekRtUsbA64.sysAffected
  • =6.3.9600.2393
Fixed in–

AI-suggested

Until a fix is available, restrict physical access to systems and avoid connecting untrusted USB devices to vulnerable systems.

Description

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker with a malicious USB device to cause a system crash by triggering unbounded recursion during device enumeration. This results in kernel stack exhaustion and a denial of service without requiring user authentication.

References

Community reviews

Loading reviews…