USB Request Structure Vulnerability in Linux Kernel

CVE-2026-46091

What is CVE-2026-46091?

A vulnerability exists in the Linux kernel related to the USB request structure, specifically in the context of Direct Memory Access (DMA) operations. The issue arises in the igorplugusb driver, where the control request must adhere to DMA coherency rules. Failure to comply can lead to inconsistencies in data transfer, potentially allowing unauthorized access or modification of memory. To mitigate this, it is crucial to allocate the USB request structure separately to ensure safe DMA operations.

References