Skip to main content
VulnerabilityPublished

CVE-2026-122113: Realtek RtUsbA64.sys · Uncontrolled Recursion

Affects Realtek RtUsbA64.sysSource CVE Database V5

0
Compare

Not known to be exploited.

Data as of 6 Nov 2026, 18:50 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Affected software

ProductAffectedFixed in
RealtekRtUsbA64.sysAffected
  • =6.3.9600.2393
Fixed in–

AI-suggested

Since the vulnerability requires physical access and a malicious USB device, mitigation includes restricting physical access to trusted users and avoiding connection of untrusted USB devices.

Description

CVE-2026-122113 is a vulnerability in Realtek's RtUsbA64.sys USB audio driver that allows a physically present attacker to cause a system crash by triggering unbounded recursion during USB device enumeration. This results in kernel stack exhaustion and a denial of service without requiring an authenticated user session.

References

Community reviews

Loading reviews…