CVE-2026-80815

A flaw was found in the ALSA scarlett2 driver in the Linux kernel. This issue arises from the driver's improper management of Universal Serial Bus Request Blocks (URBs) for notification endpoints, where an already allocated URB is reused without proper re-initialization. This can lead to a system crash, resulting in a Denial of Service (DoS) for the affected system.

This vulnerability is rated with a Low severity because exploiting it requires connecting a specific Focusrite Scarlett USB audio device or emulating it locally, limiting the attack vector to environments with direct hardware or virtual device attachment privileges. In typical enterprise and cloud deployments such as Red Hat Enterprise Linux or OpenShift, external sound cards are rarely configured or attached. Even if triggered, the impact is confined to a local denial of service via a kernel panic, without threatening host confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.