In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
The Scarlett2 mixer quirk in USB-audio driver may hit a NULL dereference when a malformed USB descriptor is passed, since it assumes the presence of an endpoint in the parsed interface in scarlett2_find_fc_interface(), as reported by fuzzer.
For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-azure-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub