CVE-2026-46184

sound: ua101: fix division by zero at probe

published May 28, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

sound: ua101: fix division by zero at probe

Add a missing sanity check for bNrChannels in detect_usb_format()

to prevent a division by zero in playback_urb_complete() and

capture_urb_complete().

USB core does not validate class-specific descriptor fields such

as bNrChannels, so drivers must verify them before use. If a

device provides bNrChannels = 0, frame_bytes becomes zero and is

later used as a divisor in the URB completion handlers, leading

to a kernel crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-28T09:36Z
EPSS history
Timeline
  • 28 MAY 09:36Z
    sound: ua101: fix division by zero at probe
    cvelistv5