Denial of Service Vulnerability in Realtek USB Audio Driver

CVE-2026-122113

What is CVE-2026-122113?

The Realtek USB audio driver, RtUsbA64.sys, presents a serious security vulnerability that enables local attackers to exploit a flaw during device enumeration. By using a maliciously crafted USB device, an attacker can trigger unbounded recursion in the driver's topology-parsing logic. This processing can lead to exhaustion of the kernel stack, ultimately causing the system to crash and resulting in a denial of service. Notably, this exploit does not require an authenticated user session, which increases its risk potential.

References