CVE-2026-52964: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
The USB MIDI 2.0 endpoint parser has the same descriptor walking pattern as the legacy MIDI parser. It validates bLength against bNumGrpTrmBlock before reading baAssoGrpTrmBlkID[], but not against the remaining bytes in the endpoint-extra scan.
A malformed device can therefore make later baAssoGrpTrmBlkID[] reads consume bytes past the walked descriptor.
Reject zero-length and overlong descriptors while walking endpoint extras.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel USB MIDI 2.0 endpoint parserto a version that resolves this vulnerability.Patch extras.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52964?
CVE-2026-52964 is rated with a risk level of 33.
How do I fix CVE-2026-52964?
To fix CVE-2026-52964, update the Linux ALSA usb-audio component to the latest patched version.
What systems are affected by CVE-2026-52964?
CVE-2026-52964 affects systems running the Linux kernel with ALSA usb-audio support.
What are the implications of CVE-2026-52964?
The implications of CVE-2026-52964 include potential vulnerabilities in processing MIDI 2.0 endpoint descriptors.
When was CVE-2026-52964 published?
CVE-2026-52964 was published on June 24, 2026.