{"id":"CVE-2026-46018","summary":"ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES\n\nparse_uac2_sample_rate_range() caps the number of enumerated\nrates at MAX_NR_RATES, but it only breaks out of the current\nrate loop. A malformed UAC2 RANGE response with additional\ntriplets continues parsing the remaining triplets and repeatedly\nprints \"invalid uac2 rates\" while probe still holds\nregister_mutex.\n\nStop the whole parse once the cap is reached and return the\nnumber of rates collected so far.","modified":"2026-11-08T02:30:47.483026785Z","published":"2026-05-27T12:56:19.588Z","related":["SUSE-SU-2026:23066-1","SUSE-SU-2026:23068-1","SUSE-SU-2026:23193-1","SUSE-SU-2026:23194-1","SUSE-SU-2026:23221-1","SUSE-SU-2026:23231-1","SUSE-SU-2026:23237-1","SUSE-SU-2026:23241-1","SUSE-SU-2026:23244-1","SUSE-SU-2026:3130-1","SUSE-SU-2026:3166-1","SUSE-SU-2026:3594-1","openSUSE-SU-2026:10954-1","openSUSE-SU-2026:21555-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46018.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-784472.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0da05fedf5e1966b7e7d389866cb86fcf09f4b32"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4d7893a137eadb6163ea4298bf67d74b811d76ef"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5436bc1b07d4656f99412dc72871d250d7d55205"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a0b78639ef09b2e77974a3de3b1c07f6de3c5e56"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ab5ba9fd138758ddc50222264ff246b31e397abf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ba036305323814ec1f8655313b2fa6a0f7048716"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f14bd323eec4b4f0ef662520ec852e593ece1d4c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46018.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46018"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4fa0e81b83503900be277e6273a79651b375e288"},{"fixed":"5436bc1b07d4656f99412dc72871d250d7d55205"},{"fixed":"0da05fedf5e1966b7e7d389866cb86fcf09f4b32"},{"fixed":"f14bd323eec4b4f0ef662520ec852e593ece1d4c"},{"fixed":"ab5ba9fd138758ddc50222264ff246b31e397abf"},{"fixed":"ba036305323814ec1f8655313b2fa6a0f7048716"},{"fixed":"4d7893a137eadb6163ea4298bf67d74b811d76ef"},{"fixed":"a0b78639ef09b2e77974a3de3b1c07f6de3c5e56"},{"fixed":"3c318f97dcc50b2e0556a1813bd6958678e881fd"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.0.81"},{"fixed":"3.1"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.2.47"},{"fixed":"3.3"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"44f059fb742aac78cffdab5e0d8fe0c9910c1ded"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c25a53781f61c78bf2a2fa308bbd35b42ba346f6"}]}],"versions":["v3.0.101","v3.0.100","v3.0.99","v3.0.98","v3.0.97","v3.0.96","v3.0.95","v3.0.94","v3.0.93","v3.0.92","v3.0.91","v3.0.90","v3.0.89","v3.0.88","v3.0.87","v3.0.86","v3.0.85","v3.0.84","v3.0.83","v3.0.82","v3.0.81","v3.2.102","v3.2.101","v3.2.100","v3.2.99","v3.2.98","v3.2.97","v3.2.96","v3.2.95","v3.2.94","v3.2.93","v3.2.92","v3.2.91","v3.2.90","v3.2.89","v3.2.88","v3.2.87","v3.2.86","v3.2.85","v3.2.84","v3.2.83","v3.2.82","v3.2.81","v3.2.80","v3.2.79","v3.2.78","v3.2.77","v3.2.76","v3.2.75","v3.2.74","v3.2.73","v3.2.72","v3.2.71","v3.2.70","v3.2.69","v3.2.68","v3.2.67","v3.2.66","v3.2.65","v3.2.64","v3.2.63","v3.2.62","v3.2.61","v3.2.60","v3.2.59","v3.2.58","v3.2.57","v3.2.56","v3.2.55","v3.2.54","v3.2.53","v3.2.52","v3.2.51","v3.2.50","v3.2.49","v3.2.48","v3.2.47"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46018.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.3.0"},{"fixed":"5.10.258"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.209"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.175"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.140"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.86"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.27"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46018.json"}}],"schema_version":"1.9.2"}