VulnerabilityPublished 17 Sep 2026Updated 19 Oct 2026

CVE-2026-93056: Linux kernel · usb: gadget: f_uac1_legacy: remove broken string configfs attributes

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7, 977659adb341f6e30fb00dcf183f63f29df879e2, 6351ba62778f72dc4f6bc18bfa99e618829cff0d +5

Exploitation evidence

Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7	Fixed in fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < 977659adb341f6e30fb00dcf183f63f29df879e2	Fixed in 977659adb341f6e30fb00dcf183f63f29df879e2
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < 6351ba62778f72dc4f6bc18bfa99e618829cff0d	Fixed in 6351ba62778f72dc4f6bc18bfa99e618829cff0d
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < 745adfe6c337f3d5d7737d57529d14a208151b45	Fixed in 745adfe6c337f3d5d7737d57529d14a208151b45
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < 590d74ec8f488e06b9f1c0f8f0941f45531f3a55	Fixed in 590d74ec8f488e06b9f1c0f8f0941f45531f3a55
LinuxLinux	Affected ≥ 0854611a19ae4dfa56569e6f640017a1d2dd3312, < 021b58ac3e58cffa68ed9585ff492a19e98414f6	Fixed in 021b58ac3e58cffa68ed9585ff492a19e98414f6

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: remove broken string configfs attributes The UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for the fn_play, fn_cap, and fn_cntl string options. The store function contains an inverted null check on the kstrndup() return value. This means every write attempt returns -ENOMEM on success and dereferences a NULL pointer on allocation failure. The attributes have been broken and unused for many years. Remove the UAC1_STR_ATTRIBUTE macro and the three attributes it generated. The internal defaults (FILE_PCM_PLAYBACK, FILE_PCM_CAPTURE, FILE_CONTROL) set in f_audio_alloc_inst() are unaffected.

References

Community reviews

Loading reviews…