CVE-2026-98741

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initialization. An attacker who connects a specially crafted USB device can trigger an out-of-bounds memory write past the playback buffer. This vulnerability can lead to a denial of service (DoS) through a kernel crash or potentially allow arbitrary code execution with kernel privileges.

This vulnerability is evaluated as having an Important impact because an attacker capable of introducing a malicious or emulated USB device can cause an out-of-bounds kernel memory write, potentially achieving arbitrary code execution with kernel privileges or crashing the system. Exploitation requires physical access to attach the hardware or the ability to attach an emulated USB device in a virtual machine environment. Standard Red Hat Enterprise Linux server deployments do not actively use this specialized audio hardware driver by default, substantially restricting exposure in production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.