CVE-2026-23078

A heap buffer overflow vulnerability was found in the Linux kernel's ALSA scarlett2 driver for Focusrite Scarlett audio interfaces. The scarlett2_usb_get_config() function incorrectly checks the total buffer size instead of element size when performing endianness conversion. When count is greater than 1, the loop accesses count*2 bytes while only size bytes are allocated, causing a buffer overflow.

This vulnerability affects systems with Focusrite Scarlett USB audio interfaces. The buffer overflow occurs during configuration retrieval from the device and could potentially be exploited for kernel memory corruption. Practical exploitation requires a malicious or specially crafted USB device response.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_usb_audio module from being loaded if USB audio devices are not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.