CVE-2026-46146

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-46146

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46146.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-46146

Downstream

AZL (1)

AZL-88890

BELL (1)

BELL-CVE-2026-46146

DEBIAN (1)

DEBIAN-CVE-2026-46146

ECHO (1)

ECHO-b8c0-57ce-9542

openSUSE (2)

ROOT (4)

SUSE (12)

UBUNTU (1)

Related

openSUSE (2)

SUSE (12)

Published

2026-05-28T09:36:02Z

Modified

2026-10-15T10:47:34Z

Summary

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to validate cs_desc->wLength itself, which may lead to potential endless loop by a malformed descriptor.

Add a proper size check to abort the loop for plugging the hole.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46146.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

786571b10b1ae6d90e1242848ce78ee7e1d493c4

Fixed

076d5d13eb9c1ad259a7f246149f6676c62285f9

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

275e37532e8ebe25e8a4069b2d9f955bfd202a46

Fixed

316aa0b1e3c5600eae5ab876394c1ac70e6db581

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

47ab3d820cb0a502bd0074f83bb3cf7ab5d79902

Fixed

24a40df79307ca7ca0eec0889361cf6ac146d72a

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1034719fdefd26caeec0a44a868bb5a412c2c1a5

Fixed

e0e3dcf48189603f3865f1a0b799b3b42baae96d

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

ae17b3b5e753efc239421d186cd1ff06e5ac296e

Fixed

4e0ee232ebe3df04874125d7c7f3e6c25ea5483d

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

ecfd41166b72b67d3bdeb88d224ff445f6163869

Fixed

be09b47ed8677d76962e3240c145502e2ad9f3c8

Fixed

fa5b19ce69067874b1413f3c2027563bae8c2cb3

Fixed

6e7247d8f5fefeceb0bb9cc80a5388a636b219cd

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.10.241

Fixed

5.10.258

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.15.190

Fixed

5.15.209

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.1.149

Fixed

6.1.175

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.6.103

Fixed

6.6.140

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.12.43

Fixed

6.12.88

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.4.297

Fixed

5.5

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.15.11

Fixed

6.16

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.16.2

Fixed

6.17

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

799c06ad4c9c790c265e8b6b94947213f1fb389c

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

dfdcbcde5c20df878178245d4449feada7d5b201

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7ef3fd250f84494fb2f7871f357808edaa1fc6ce

Affected versions

v5.*

v5.10.241

v5.10.242

v5.10.243

v5.10.244

v5.10.245

v5.10.246

v5.10.247

v5.10.248

v5.10.249

v5.10.250

v5.10.251

v5.10.252

v5.10.253

v5.10.254

v5.10.255

v5.10.256

v5.10.257

v5.15.190

v5.15.191

v5.15.192

v5.15.193

v5.15.194

v5.15.195

v5.15.196

v5.15.197

v5.15.198

v5.15.199

v5.15.200

v5.15.201

v5.15.202

v5.15.203

v5.15.204

v5.15.205

v5.15.206

v5.15.207

v5.15.208

v5.4.297

v5.4.298

v5.4.299

v5.4.300

v5.4.301

v5.4.302

v6.*

v6.1.149

v6.1.150

v6.1.151

v6.1.152

v6.1.153

v6.1.154

v6.1.155

v6.1.156

v6.1.157

v6.1.158

v6.1.159

v6.1.160

v6.1.161

v6.1.162

v6.1.163

v6.1.164

v6.1.165

v6.1.166

v6.1.167

v6.1.168

v6.1.169

v6.1.170

v6.1.171

v6.1.172

v6.1.173

v6.1.174

v6.12.43

v6.12.44

v6.12.45

v6.12.46

v6.12.47

v6.12.48

v6.12.49

v6.12.50

v6.12.51

v6.12.52

v6.12.53

v6.12.54

v6.12.55

v6.12.56

v6.12.57

v6.12.58

v6.12.59

v6.12.60

v6.12.61

v6.12.62

v6.12.63

v6.12.64

v6.12.65

v6.12.66

v6.12.67

v6.12.68

v6.12.69

v6.12.70

v6.12.71

v6.12.72

v6.12.73

v6.12.74

v6.12.75

v6.12.76

v6.12.77

v6.12.78

v6.12.79

v6.12.80

v6.12.81

v6.12.82

v6.12.83

v6.12.84

v6.12.85

v6.12.86

v6.12.87

v6.15.11

v6.16.10

v6.16.11

v6.16.12

v6.16.2

v6.16.3

v6.16.4

v6.16.5

v6.16.6

v6.16.7

v6.16.8

v6.16.9

v6.6.103

v6.6.104

v6.6.105

v6.6.106

v6.6.107

v6.6.108

v6.6.109

v6.6.110

v6.6.111

v6.6.112

v6.6.113

v6.6.114

v6.6.115

v6.6.116

v6.6.117

v6.6.118

v6.6.119

v6.6.120

v6.6.121

v6.6.122

v6.6.123

v6.6.124

v6.6.125

v6.6.126

v6.6.127

v6.6.128

v6.6.129

v6.6.130

v6.6.131

v6.6.132

v6.6.133

v6.6.134

v6.6.135

v6.6.136

v6.6.137

v6.6.138

v6.6.139

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46146.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.10.258

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.209

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.175

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.140

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.88

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.30

Type: ECOSYSTEM
Events: Introduced

6.17.0

Fixed

7.0.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46146.json"