CVE-2026-64478

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-64478

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64478.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-64478

Downstream

AZL (1)

AZL-93728

BELL (1)

BELL-CVE-2026-64478

DEBIAN (1)

DEBIAN-CVE-2026-64478

ECHO (1)

ECHO-f882-8a7b-12e4

openSUSE (2)

ROOT (1)

ROOT-OS-UBUNTU-2204-CVE-2026-64478

SUSE (10)

UBUNTU (1)

Related

openSUSE (2)

SUSE (10)

Published

2026-07-25T08:51:40Z

Modified

2026-10-08T02:51:32Z

Summary

ALSA: usb-audio: avoid kobject path lookup in DualSense match

Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: avoid kobject path lookup in DualSense match

The DualSense jack-detection input handler verifies that a matching input device belongs to the same physical controller by building kobject path strings for both the input device and the USB audio device, then comparing the path prefix.

This was observed when a weak physical connection caused the controller to rapidly disconnect and reconnect. During that repeated hotplug, snd_dualsense_ih_match() can run while the controller's USB device is being disconnected. kobject_get_path() walks ancestor kobjects and dereferences their names; if the USB device kobject name is no longer valid, this can fault in strlen():

RIP: 0010:strlen+0x10/0x30 Call Trace: kobject_get_path+0x34/0x150 snd_dualsense_ih_match+0x49/0xd0 [snd_usb_audio] input_register_device+0x566/0x6a0 ps_probe+0xb89/0x1590 [hid_playstation]

The same ownership check can be done without building kobject path strings. The input device is parented below the HID device, USB interface and USB device, so walking the input device parent chain and comparing against the mixer USB device preserves the check without dereferencing kobject names during disconnect.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64478.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

d0b0264009596c07a77d82808b0dae72bc04ac5c

Fixed

e4c66a149c408e44e60bfec3fabf08b6b7abbc60

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

b4b94f092f193d7a2db8e82af5e51519ae89963c

Fixed

4566bf8ae9dbfe81bdc2ff1702d59db8a233b06e

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c2d5b0a6c688ffb32c35627e337fbbcc65bc275f

Fixed

662a1d7b5affc424ea4f4bc20dd99be29e687886

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

d04d301614630724feb4048bf17432fc7964fe74

Fixed

a47ecd904c51ae6a42957feb3cf2f4266adee2e5

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a705899ec6085b12a33aa0fd94a58e82e9e90502

Fixed

c1da6d3f45036fa63672ee04ad97cb526b40b987

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

79d561c4ec0497669f19a9550cfb74812f60938b

Fixed

a263eb12cbe2e208e6e637df0f9b0be9a484158e

Fixed

4246dd043b7a4f8e3bc1d2896e81d11220610eda

Fixed

7693c0cc415f3a16a7a3355f245474a5e661be4e

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.10.245

Fixed

5.10.261

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.15.194

Fixed

5.15.212

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.1.155

Fixed

6.1.178

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.6.109

Fixed

6.6.145

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.12.50

Fixed

6.12.96

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.4.300

Fixed

5.5

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.16.10

Fixed

6.17

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

104ad9bae11ee450fb7d0595ff7876cfb6527838

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

0105cfc41abeb428d4405951a20e1e239bea5e1d

Affected versions

v5.*

v5.10.245

v5.10.246

v5.10.247

v5.10.248

v5.10.249

v5.10.250

v5.10.251

v5.10.252

v5.10.253

v5.10.254

v5.10.255

v5.10.256

v5.10.257

v5.10.258

v5.10.259

v5.10.260

v5.15.194

v5.15.195

v5.15.196

v5.15.197

v5.15.198

v5.15.199

v5.15.200

v5.15.201

v5.15.202

v5.15.203

v5.15.204

v5.15.205

v5.15.206

v5.15.207

v5.15.208

v5.15.209

v5.15.210

v5.15.211

v5.4.300

v5.4.301

v5.4.302

v6.*

v6.1.155

v6.1.156

v6.1.157

v6.1.158

v6.1.159

v6.1.160

v6.1.161

v6.1.162

v6.1.163

v6.1.164

v6.1.165

v6.1.166

v6.1.167

v6.1.168

v6.1.169

v6.1.170

v6.1.171

v6.1.172

v6.1.173

v6.1.174

v6.1.175

v6.1.176

v6.1.177

v6.12.50

v6.12.51

v6.12.52

v6.12.53

v6.12.54

v6.12.55

v6.12.56

v6.12.57

v6.12.58

v6.12.59

v6.12.60

v6.12.61

v6.12.62

v6.12.63

v6.12.64

v6.12.65

v6.12.66

v6.12.67

v6.12.68

v6.12.69

v6.12.70

v6.12.71

v6.12.72

v6.12.73

v6.12.74

v6.12.75

v6.12.76

v6.12.77

v6.12.78

v6.12.79

v6.12.80

v6.12.81

v6.12.82

v6.12.83

v6.12.84

v6.12.85

v6.12.86

v6.12.87

v6.12.88

v6.12.89

v6.12.90

v6.12.91

v6.12.92

v6.12.93

v6.12.94

v6.12.95

v6.16.10

v6.16.11

v6.16.12

v6.6.109

v6.6.110

v6.6.111

v6.6.112

v6.6.113

v6.6.114

v6.6.115

v6.6.116

v6.6.117

v6.6.118

v6.6.119

v6.6.120

v6.6.121

v6.6.122

v6.6.123

v6.6.124

v6.6.125

v6.6.126

v6.6.127

v6.6.128

v6.6.129

v6.6.130

v6.6.131

v6.6.132

v6.6.133

v6.6.134

v6.6.135

v6.6.136

v6.6.137

v6.6.138

v6.6.139

v6.6.140

v6.6.141

v6.6.142

v6.6.143

v6.6.144

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64478.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.10.261

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.212

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.178

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.145

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.96

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.39

Type: ECOSYSTEM
Events: Introduced

6.17.0

Fixed

7.1.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64478.json"