CVE-2026-72446 | Linux Kernel up to 6.18.39/7.1.4 ALSA USB Audio Qualcomm Driver handle_uaudio_stream_req out-of-bounds write

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.39/7.1.4. The impacted element is the function handle_uaudio_stream_req of the component ALSA USB Audio Qualcomm Driver. Such manipulation leads to out-of-bounds write.

This vulnerability is documented as CVE-2026-72446. The attack needs to be performed locally. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More