What it is
Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Linux entries on the list
- Kernel Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 · Oct 28, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 · Sep 18, 2026
- Kernel Linux Kernel Race Condition Vulnerability CVE-2025-39964 · Sep 18, 2026
- Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 · Sep 18, 2026
- Kernel Linux Kernel Unspecified Vulnerability CVE-2026-53362 · Aug 27, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2022-0995 · Aug 26, 2026