In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
The Scarlett2 mixer quirk in USB-audio driver may hit a NULL dereference when a malformed USB descriptor is passed, since it assumes the presence of an endpoint in the parsed interface in scarlett2_find_fc_interface(), as reported by fuzzer.
For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-gkeop | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub