CVE-2026-74497

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74497
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74497
Downstream
Published
2026-08-15T12:27:24Z
Modified
2026-08-21T03:30:27Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Clamp frame size in implicit-feedback mode

snd_usb_handle_sync_urb() scales received sync packet sizes by the sender's stride and stores the result directly in out_packet->packet_size[i]. If a connected USB device sends an oversized sync packet, this frame count can exceed ep->maxframesize.

The un-clamped frame count then propagates to the playback endpoint queue, potentially driving packet transfers beyond the endpoint's hardware frame limits.

Cap the calculated frame count against ep->maxframesize in snd_usb_handle_sync_urb() to prevent oversized packets from entering the playback queue.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74497.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
28acb12014fb0c3e1edfdab1b1e3e266cf651550
Fixed
2d39fea6d3c19a2f5811d123114d92e3d0115fd1
Fixed
09cf3dbbb4256a43feb91d2f51f274510a9ada47
Fixed
cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be
Fixed
56ac3e7c90f6b45969c3fd07a98fad760ffd6901
Fixed
be97fea7451d758881b95af78e900dd0d58a382a
Fixed
2db4535d6af79276a64449201c5be5feffb31c64
Fixed
53f0aa37eb945f3c983f61d12fc35eb33debb8a9
Fixed
8d7a30c50c2e58a6839634ed0acde14466d1dc61

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.8.0
Fixed
5.10.265
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.216
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.183
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.151
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.103
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.44
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json"