CVE-2026-46146: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
Published May 28, 2026
·Updated
ALSA: usb-audio: Avoid potential endless loop in convertchmapv3()
Affected Software
20 affected componentsFixes available
Linux kernel ALSA usb-audio
Linux Linux kernel>=5.4.297<5.5
Linux Linux kernel>=5.10.241<5.10.258
Linux Linux kernel>=5.15.190<5.15.209
Linux Linux kernel>=6.1.149<6.1.175
Linux Linux kernel>=6.6.103<6.6.140
Linux Linux kernel>=6.12.43<6.12.88
Linux Linux kernel>=6.15.11<6.16
Linux Linux kernel>=6.16.2<6.17
Linux Linux kernel>=6.17.1<6.18.30
Linux Linux kernel>=6.19<7.0.7
Linux Linux kernel=6.17
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Linux Linux kernel=6.17-rc5
Linux Linux kernel=6.17-rc6
Linux Linux kernel=6.17-rc7
Linux Linux kernel=7.1-rc1
Microsoft azl3 kernel 6.6.139.1-1<6.6.141.1-1
6.6.141.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
May 28, 2026
CVE Published
via MITRE·09:36 AM
Data Sourced
via MITRE·09:36 AM
Description
Data Sourced
via NVD·10:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 29, 2026
Data Sourced
via Microsoft·08:07 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:07 AM
Affected Software
Updated
via Microsoft·08:07 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2026-46146?
CVE-2026-46146 is rated with a high severity score of 7.1.
2
How do I fix CVE-2026-46146?
To fix CVE-2026-46146, you should update to the latest version of the Linux kernel that addresses this vulnerability.
3
What systems are affected by CVE-2026-46146?
CVE-2026-46146 affects the Linux kernel, specifically the ALSA usb-audio subsystem.
4
What type of vulnerability is CVE-2026-46146?
CVE-2026-46146 is a potential endless loop issue found in the convert_chmap_v3() function of the ALSA usb-audio component.
5
What are the potential impacts of CVE-2026-46146?
The potential impact of CVE-2026-46146 includes system instability due to an endless loop, which could lead to denial of service.