CVE-2026-23208: ALSA: usb-audio: Prevent excessive number of frames
ALSA: usb-audio: Prevent excessive number of frames
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix that adds a check for the number of single data URB frames when calculating frames, to prevent the calculated frames (e.g., maxpacksize * packets) from exceeding the allocated URB buffer and triggering slab out-of-bounds in copy_to_urb.
Linux kernel (ALSA usb-audio / sound/usb/pcm.c) single data URB frames calculation = Add a check for the number of single data URB frames when calculating the number of frames for the ALSA PCM playback stream
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23208?
The severity of CVE-2026-23208 is classified as medium due to its potential impact on system stability.
How do I fix CVE-2026-23208?
To fix CVE-2026-23208, it is recommended to update the Linux kernel to the latest stable version that includes the security patch.
Which systems are affected by CVE-2026-23208?
CVE-2026-23208 affects Linux kernel versions that utilize the ALSA usb-audio subsystem.
What kind of vulnerability is CVE-2026-23208?
CVE-2026-23208 is a vulnerability related to excessive processing of audio frames in the ALSA subsystem, which may lead to system performance issues.
Is there a known exploit for CVE-2026-23208?
As of now, there are no publicly known exploits for CVE-2026-23208, but the vulnerability remains a potential risk if not addressed.