Out-of-Bounds Write Vulnerability in Linux Kernel USB Audio Subsystem

CVE-2026-80829

What is CVE-2026-80829?

A vulnerability exists in the USB audio subsystem of the Linux kernel, specifically affecting the snd_usbmidi_novation_output function. An attacker can exploit this vulnerability through a malicious device advertising a bulk OUT endpoint with a wMaxPacketSize of one. This scenario leads to an out-of-bounds write due to improper handling of negative transfer sizes, causing potential memory corruption. The vulnerability was resolved by ensuring that the endpoint can accommodate the necessary headers and at least one payload byte, similar to the fix applied to another function within the subsystem.

References