Threats Tagged 'cve-2026-46018'

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints "invalid uac2 rates" while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.

CVE-2026-46018 is a vulnerability related to ALSA usb-audio where parsing of UAC2 rates is stopped at MAX_NR_RATES. The provided description does not detail the technical nature or impact of the vulnerability. No CVSS score or detailed impact information is available. There are no known exploits in the wild and no patch or remediation information has been provided. The affected products include Microsoft and Azure Linux 3.0 versions. Due to limited information, the severity is assessed as medium based on the potential for audio subsystem issues but lacking explicit impact details.