CVE-2026-46018

Descripción

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enumerated rates at MAX_NR_RATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional triplets continues parsing the remaining triplets and repeatedly prints -invalid uac2 rates- while probe still holds register_mutex. Stop the whole parse once the cap is reached and return the number of rates collected so far.