CVE-2026-74497

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74497
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74497
Downstream
Published
2026-08-15T12:27:24.494Z
Modified
2026-08-17T03:54:57.434630173Z
Summary
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Clamp frame size in implicit-feedback mode

sndusbhandlesyncurb() scales received sync packet sizes by the sender's stride and stores the result directly in outpacket->packetsize[i]. If a connected USB device sends an oversized sync packet, this frame count can exceed ep->maxframesize.

The un-clamped frame count then propagates to the playback endpoint queue, potentially driving packet transfers beyond the endpoint's hardware frame limits.

Cap the calculated frame count against ep->maxframesize in sndusbhandlesyncurb() to prevent oversized packets from entering the playback queue.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74497.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
28acb12014fb0c3e1edfdab1b1e3e266cf651550
Fixed
56ac3e7c90f6b45969c3fd07a98fad760ffd6901
Fixed
be97fea7451d758881b95af78e900dd0d58a382a
Fixed
2db4535d6af79276a64449201c5be5feffb31c64
Fixed
53f0aa37eb945f3c983f61d12fc35eb33debb8a9
Fixed
8d7a30c50c2e58a6839634ed0acde14466d1dc61

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.8.0
Fixed
6.6.151
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.103
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.44
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74497.json"