CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture (ALSA) usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping (mmap) fault offset. This allows read-write access to arbitrary kernel memory, potentially leading to a denial of service (kernel crash) or privilege escalation.

ALSA usx2y hwdep mmap fault handling can use an attacker controlled page offset without a bounds check and convert an address outside the shared buffer into a mapped struct page. A local process that can open the hwdep node for an attached US-X2Y device can choose the mmap offset and may obtain read-write access to kernel memory outside the intended object. The buf is not triggerable if no hardware that is being used by snd-usb-usx2y driver (that is Kernel module).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module snd-usb-usx2y and ALSA (Advanced Linux Sound Architecture) from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.