CVE-2026-93122 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux-based systems with USB gadget functionality should assess exposure and apply the patch. System administrators and security teams should monitor for potential exploitation attempts.

Why it matters

CVE-2026-93122 is a Linux kernel vulnerability that allows local attackers to trigger an out-of-bounds write via the UAC1 and UAC2 configfs rate-list attributes. This issue can lead to a denial of service or potentially code execution. Linux kernel developers, maintainers, and users of Linux-based systems with USB gadget functionality should assess exposure and apply the patch.

• Denial of service due to out-of-bounds write
• Potential code execution with elevated privileges
• Increased risk for Linux-based systems with USB gadget functionality

Technical summary

The Linux kernel vulnerability (CVE-2026-93122) occurs in the USB gadget function, specifically in the UAC1 and UAC2 configfs rate-list attributes. These attributes parse a comma-separated list of sampling rates and store each parsed value in fixed-size arrays. However, the store paths do not check that the input contains at most UAC_MAX_RATES entries before writing through opts->name##s[i++]. This allows an attacker with local access to trigger an out-of-bounds write by writing more than ten rates.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the kernel patch to validate rate list length before storing
• Restrict access to the UAC1 and UAC2 configfs rate-list attributes to authorized users
• Monitor for potential exploitation attempts
• Perform vulnerability assessment to identify potential exposure
• Implement compensating controls for exposed systems
• Track changes to Linux kernel configurations and updates
• Review asset inventory for systems with USB gadget functionality

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description and CVSS score. Two source references from the Linux kernel Git repository are also available. The vulnerability allows USB gadget users with local access to trigger an out-of-bounds write via the UAC1 and UAC2 configfs rate-list attributes. This issue can lead to a denial of service or potentially code execution. Linux kernel developers, maintainers, and users of Linux-based systems with USB gadget functionality should assess exposure and to

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.