Vulnerability in Linux

CVE-2026-52963

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_get_ms_info() validates the internal MIDIStreaming endpoint descriptor size before using baAssocJackID[…

Affected products

  • Linux — versions 5c6cd7021a05a02fcf37f360592d7c18d4d807fb, 9e0c71f2f633b0442661966228827d1a33df485f, 0868bc5654c07628c421547f0821650a8c2cb8f3

References