CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus (USB) audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial of Service (DoS) via a system crash, or potentially lead to kernel memory corruption.

This vulnerability is rated as Important because unauthenticated exploitation from an adjacent USB host could trigger out-of-bounds kernel heap corruption or a system crash. Supported Red Hat Enterprise Linux configurations are not vulnerable because the legacy USB audio gadget subsystem is not enabled in shipping kernel builds. Additionally, USB gadget functionality requires dedicated hardware running in peripheral device mode, which is not part of standard enterprise server environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.