CVE-2026-97930ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
- —Not scoredno CVSS score yet
- 0.21%Exploitation in 30 daysEPSS · top 89% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf The in04_last array in struct usx2ydev is declared as char[24], but in04_buf is allocated as sizeof(struct us428_ctls) which is 21 bytes. In i_usx2y_in04_int(), when ctl_snapshot_last == -2 (initialization path): memcpy(usx2y->in04_last, usx2y->in04_buf, sizeof(usx2y->in04_last)); This copies 24 bytes from a 21-byte slab allocation, reading 3 bytes past the end of the source object. Introduce a USX2Y_IN04_SIZE constant defined as sizeof(struct us428_ctls) and use it consistently for the in04_last array, the in04_buf allocation, the URB transfer length, and the comparison loop, replacing the bare 24 and 21 literals throughout.
Timeline
ID reserved
By Linux
Published
- 24 days later
· 24 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.21% · top 89% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < e75e4b0e647137f4c9f6dee4a7ef5b7b09e16f57
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 869fb83c072e884b80d93eab498e6040ffb010ba
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < d170cfbe38c8817ac787f605655546a6d343017d
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 229cab526580f82839ae8e4e379753c8cf16952e
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 381495b5b3da12d714e53d9d12d955b13fe26eac
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < b5753bdfd909f7f095fb464d67802b5e52cbadbf
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 861111a14740e12c36d363e9830f8daa734279c9
- affected 2.6.12
- unaffected < 2.6.12
- unaffected 5.15.222 – ≤ 5.15.*
- unaffected 6.1.189 – ≤ 6.1.*
- unaffected 6.6.158 – ≤ 6.6.*
- unaffected 6.12.111 – ≤ 6.12.*
- unaffected 6.18.53 – ≤ 6.18.*
- unaffected 7.2.7 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References7
- https://git.kernel.org/stable/c/e75e4b0e647137f4c9f6dee4a7ef5b7b09e16f57 (opens in a new tab)
- https://git.kernel.org/stable/c/869fb83c072e884b80d93eab498e6040ffb010ba (opens in a new tab)
- https://git.kernel.org/stable/c/d170cfbe38c8817ac787f605655546a6d343017d (opens in a new tab)
- https://git.kernel.org/stable/c/229cab526580f82839ae8e4e379753c8cf16952e (opens in a new tab)
- https://git.kernel.org/stable/c/381495b5b3da12d714e53d9d12d955b13fe26eac (opens in a new tab)
- https://git.kernel.org/stable/c/b5753bdfd909f7f095fb464d67802b5e52cbadbf (opens in a new tab)
- https://git.kernel.org/stable/c/861111a14740e12c36d363e9830f8daa734279c9 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-86784 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-97930)Record last updated .