PatchSiren cyber security CVE debrief
CVE-2026-46018 Linux CVE debrief
A logic error in the Linux kernel's USB Audio Class 2 (UAC2) sample rate parsing allows malformed device descriptors to trigger excessive kernel logging while holding a mutex, potentially causing denial-of-service conditions through log flooding and extended lock contention.
- Vendor
- Linux
- Product
- Unknown
- CVSS
- Unknown
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-27
- Original CVE updated
- 2026-05-27
- Advisory published
- 2026-05-27
- Advisory updated
- 2026-05-27
Who should care
Linux system administrators, embedded device manufacturers using USB audio, kernel maintainers, organizations with physical security requirements
Technical summary
The parse_uac2_sample_rate_range() function in sound/usb/clock.c enforces MAX_NR_RATES (1024) as a cap on enumerated sample rates but only breaks from the inner loop processing individual rates within a triplet. When a malformed UAC2 RANGE response contains additional triplets beyond the cap, parsing continues through remaining triplets, repeatedly emitting 'invalid uac2 rates' kernel warnings. This occurs while register_mutex is held during device probe, extending lock contention and potentially flooding kernel logs. The fix terminates the entire parse operation when MAX_NR_RATES is reached, returning the collected rate count.
Defensive priority
medium
Recommended defensive actions
- Apply kernel updates from stable branches when available per vendor security advisories
- Monitor system logs for excessive 'invalid uac2 rates' messages from USB audio devices
- Restrict physical access to prevent connection of untrusted USB audio devices
- Consider disabling USB audio modules if not required in high-security environments
Evidence notes
CVE published 2026-05-27. NVD status 'Awaiting Analysis'. No CVSS assigned. Five kernel.org stable branch commits provided as references. No KEV entry. Vendor identified as Linux kernel project with low confidence from reference domain analysis.
Official resources
-
CVE-2026-46018 CVE record
CVE.org
-
CVE-2026-46018 NVD detail
NVD
-
Source item URL
nvd_modified
-
Source reference
416baaa9-dc9f-4396-8d5f-8c081fb06d67
-
Source reference
416baaa9-dc9f-4396-8d5f-8c081fb06d67
-
Source reference
416baaa9-dc9f-4396-8d5f-8c081fb06d67
-
Source reference
416baaa9-dc9f-4396-8d5f-8c081fb06d67
-
Source reference
416baaa9-dc9f-4396-8d5f-8c081fb06d67
2026-05-27