Vulnerability-Lookup

RHSA-2026:44522

Vulnerability from csaf_opensuse - Published: 2026-07-23 00:00 - Updated: 2026-09-16 18:40

Summary

security update for kernel

Severity

Moderate

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2026:44522. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:44522.

Patchnames: RHSA-2026:44522

CVE-2026-43279

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.157.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.157.1.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

References

7 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://lists.suse.com/pipermail/suse-liberty-lin…	self
https://lists.suse.com/pipermail/suse-liberty-lin…	self
https://www.suse.com/security/cve/CVE-2026-43279/	self
https://www.suse.com/security/cve/CVE-2026-43279	external
https://bugzilla.suse.com/1264618	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2026:44522.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:44522.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2026:44522",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_44522.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2026:44522",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007275.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2026:44522",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007275.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43279 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43279/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-16T18:40:00Z",
      "generator": {
        "date": "2026-07-23T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2026:44522",
      "initial_release_date": "2026-07-23T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-07-23T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T17:58:57Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T18:40:00Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
                  "product_id": "kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.157.1.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-3.10.0-1160.157.1.el7.noarch",
                "product": {
                  "name": "kernel-doc-3.10.0-1160.157.1.el7.noarch",
                  "product_id": "kernel-doc-3.10.0-1160.157.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.157.1.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "bpftool-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "bpftool-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@3.10.0-1160.157.1.el7?arch=x86_64\u0026upstream=bpftool-3.10.0-1160.157.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-debug-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.157.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.157.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.157.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.157.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.157.1.el7?arch=x86_64\u0026upstream=kernel-source-3.10.0-1160.157.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-headers-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-headers-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-tools-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "perf-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "perf-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-1160.157.1.el7?arch=x86_64\u0026upstream=perf-3.10.0-1160.157.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-3.10.0-1160.157.1.el7.x86_64",
                "product": {
                  "name": "python-perf-3.10.0-1160.157.1.el7.x86_64",
                  "product_id": "python-perf-3.10.0-1160.157.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-1160.157.1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7 LTSS",
                "product": {
                  "name": "SUSE Liberty Linux 7 LTSS",
                  "product_id": "SUSE Liberty Linux 7 LTSS"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "bpftool-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-devel-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-3.10.0-1160.157.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.157.1.el7.noarch"
        },
        "product_reference": "kernel-doc-3.10.0-1160.157.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-headers-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "perf-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-3.10.0-1160.157.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.157.1.el7.x86_64"
        },
        "product_reference": "python-perf-3.10.0-1160.157.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-43279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Add sanity check for OOB writes at silencing\n\nAt silencing the playback URB packets in the implicit fb mode before\nthe actual playback, we blindly assume that the received packets fit\nwith the buffer size.  But when the setup in the capture stream\ndiffers from the playback stream (e.g. due to the USB core limitation\nof max packet size), such an inconsistency may lead to OOB writes to\nthe buffer, resulting in a crash.\n\nFor addressing it, add a sanity check of the transfer buffer size at\nprepare_silent_urb(), and stop the data copy if the received data\noverflows.  Also, report back the transfer error properly from there,\ntoo.\n\nNote that this doesn\u0027t fix the root cause of the playback error\nitself, but this merely covers the kernel Oops.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
          "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.157.1.el7.noarch",
          "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.157.1.el7.x86_64",
          "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.157.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43279",
          "url": "https://www.suse.com/security/cve/CVE-2026-43279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264618 for CVE-2026-43279",
          "url": "https://bugzilla.suse.com/1264618"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
            "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.157.1.el7.noarch",
            "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.157.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.157.1.el7.noarch",
            "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.157.1.el7.noarch",
            "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.157.1.el7.x86_64",
            "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.157.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43279"
    }
  ]
}

CVE-2026-43279 (GCVE-0-2026-43279)

Vulnerability from cvelistv5 – Published: 2026-05-06 11:29 – Updated: 2026-08-05 12:27

Title

ALSA: usb-audio: Add sanity check for OOB writes at silencing

Summary

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the implicit fb mode before the actual playback, we blindly assume that the received packets fit with the buffer size. But when the setup in the capture stream differs from the playback stream (e.g. due to the USB core limitation of max packet size), such an inconsistency may lead to OOB writes to the buffer, resulting in a crash. For addressing it, add a sanity check of the transfer buffer size at prepare_silent_urb(), and stop the data copy if the received data overflows. Also, report back the transfer error properly from there, too. Note that this doesn't fix the root cause of the playback error itself, but this merely covers the kernel Oops.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux CNA under the mitre root

CNA scorecard D 54/100 over 6633 records in the last 180 days details

References

7 references

URL	Tags
https://git.kernel.org/stable/c/fa01973bb79d70c47…
https://git.kernel.org/stable/c/780dc57794a217b49…
https://git.kernel.org/stable/c/8995fc0e00b3fee9b…
https://git.kernel.org/stable/c/fc9e5af60dc199051…
https://git.kernel.org/stable/c/6af16f1b8649df4c0…
https://git.kernel.org/stable/c/ccaf9296763be4f76…
https://git.kernel.org/stable/c/fba2105a157fffcf1…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < fa01973bb79d70c4736b6a4b2de99fbb2cbc8d1f (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < 780dc57794a217b49994fa1d0b42465fb10a00aa (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < 8995fc0e00b3fee9bf7ecb3d836b635b730c1049 (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < fc9e5af60dc199051dc202ae78e1fe76a9977a5e (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < 6af16f1b8649df4c00d6ced924bdd8b72c885b6a (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < ccaf9296763be4f76b59e2cac377006016c34435 (git) Affected: c75a8a7ae565d7cd9baa87a504ba9162e355b4b0 , < fba2105a157fffcf19825e4eea498346738c9948 (git)
Linux	Linux	Affected: 3.5 Unaffected: 0 , < 3.5 (semver) Unaffected: 5.15.202 , ≤ 5.15.* (semver) Unaffected: 6.1.165 , ≤ 6.1.* (semver) Unaffected: 6.6.128 , ≤ 6.6.* (semver) Unaffected: 6.12.75 , ≤ 6.12.* (semver) Unaffected: 6.18.16 , ≤ 6.18.* (semver) Unaffected: 6.19.6 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/endpoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fa01973bb79d70c4736b6a4b2de99fbb2cbc8d1f",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "780dc57794a217b49994fa1d0b42465fb10a00aa",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "8995fc0e00b3fee9bf7ecb3d836b635b730c1049",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "fc9e5af60dc199051dc202ae78e1fe76a9977a5e",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "6af16f1b8649df4c00d6ced924bdd8b72c885b6a",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "ccaf9296763be4f76b59e2cac377006016c34435",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            },
            {
              "lessThan": "fba2105a157fffcf19825e4eea498346738c9948",
              "status": "affected",
              "version": "c75a8a7ae565d7cd9baa87a504ba9162e355b4b0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/endpoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "lessThan": "3.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.202",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.16",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.6",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Add sanity check for OOB writes at silencing\n\nAt silencing the playback URB packets in the implicit fb mode before\nthe actual playback, we blindly assume that the received packets fit\nwith the buffer size.  But when the setup in the capture stream\ndiffers from the playback stream (e.g. due to the USB core limitation\nof max packet size), such an inconsistency may lead to OOB writes to\nthe buffer, resulting in a crash.\n\nFor addressing it, add a sanity check of the transfer buffer size at\nprepare_silent_urb(), and stop the data copy if the received data\noverflows.  Also, report back the transfer error properly from there,\ntoo.\n\nNote that this doesn\u0027t fix the root cause of the playback error\nitself, but this merely covers the kernel Oops."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is exercised through local ALSA PCM device-file operations such as open, hw_params, prepare, and trigger/write on a USB audio PCM device. It is not network reachable, but a local user can drive the stream path once a susceptible USB audio device is present.\nAC:L - There is no race or hard-to-hit timing condition; the overflow follows deterministically when implicit-feedback packet sizes exceed the playback URB buffer. A malicious or affected device plus chosen stream parameters can repeatedly drive the bad packet-size path.\nPR:L - The ALSA PCM path does not require CAP_SYS_ADMIN or another kernel capability, only permission to access the relevant /dev/snd PCM node as a normal local audio user/session. User namespaces are not needed.\nUI:N - A local attacker with PCM device access can open, configure, and start the stream directly. No separate victim action is required for that local attack path.\nS:U - The corruption occurs within the host kernel USB audio/ALSA subsystem and impacts the same kernel security authority. It is not a VM escape, IOMMU bypass, or cross-scope boundary violation.\nC:H - The bug is an out-of-bounds write into kernel USB transfer-buffer memory, which is kernel memory corruption. Even though the reported symptom is an oops, such corruption can plausibly be leveraged for information disclosure.\nI:H - The vulnerable code writes past the allocated URB transfer buffer while preparing silent playback packets. Out-of-bounds kernel writes are high-integrity impact because they can corrupt adjacent kernel state and potentially enable control-flow or data modification.\nA:H - The commit explicitly describes resulting kernel oops/crash behavior, and the fix only bounds the write to prevent that crash. The trigger can be repeated by starting the affected stream again."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:27:01.240Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fa01973bb79d70c4736b6a4b2de99fbb2cbc8d1f"
        },
        {
          "url": "https://git.kernel.org/stable/c/780dc57794a217b49994fa1d0b42465fb10a00aa"
        },
        {
          "url": "https://git.kernel.org/stable/c/8995fc0e00b3fee9bf7ecb3d836b635b730c1049"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc9e5af60dc199051dc202ae78e1fe76a9977a5e"
        },
        {
          "url": "https://git.kernel.org/stable/c/6af16f1b8649df4c00d6ced924bdd8b72c885b6a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ccaf9296763be4f76b59e2cac377006016c34435"
        },
        {
          "url": "https://git.kernel.org/stable/c/fba2105a157fffcf19825e4eea498346738c9948"
        }
      ],
      "title": "ALSA: usb-audio: Add sanity check for OOB writes at silencing",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43279",
    "datePublished": "2026-05-06T11:29:00.844Z",
    "dateReserved": "2026-05-01T14:12:55.998Z",
    "dateUpdated": "2026-08-05T12:27:01.240Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:44522

CVE-2026-43279 (GCVE-0-2026-43279)

Tags

Sightings

Nomenclature

Related by attack behaviour