CVE-2026-46184

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46184
In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrChannels in detect_usb_format() to prevent a division by zero in playback_urb_complete() and capture_urb_complete(). USB core does not validate class-specific descriptor fields such as bNrChannels, so drivers must verify them before use. If a device provides bNrChannels = 0, frame_bytes becomes zero and is later used as a divisor in the URB completion handlers, leading to a kernel crash.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0ff2b713f406e9ecadb406014d74e7a020ac12b1 Patch
https://git.kernel.org/stable/c/593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983 Patch
https://git.kernel.org/stable/c/6162e8212e88c39492d981b248b5e37002486c66 Patch
https://git.kernel.org/stable/c/66d9c2ed081f299cfb201d9e9c4faf920e56e0bf Patch
https://git.kernel.org/stable/c/aae1498c59f48d03ee358df84f07a5af9885f827 Patch
https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87 Patch
https://git.kernel.org/stable/c/e02897c5b041c9b980055fa9a6167023d6dc5caf Patch
https://git.kernel.org/stable/c/f1862dbf09080254c52175a448290c784dd7d3de Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
History

11 Jun 2026, 03:01

Type Values Removed Values Added
CWE CWE-369
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0ff2b713f406e9ecadb406014d74e7a020ac12b1 - () https://git.kernel.org/stable/c/0ff2b713f406e9ecadb406014d74e7a020ac12b1 - Patch
References () https://git.kernel.org/stable/c/593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983 - () https://git.kernel.org/stable/c/593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983 - Patch
References () https://git.kernel.org/stable/c/6162e8212e88c39492d981b248b5e37002486c66 - () https://git.kernel.org/stable/c/6162e8212e88c39492d981b248b5e37002486c66 - Patch
References () https://git.kernel.org/stable/c/66d9c2ed081f299cfb201d9e9c4faf920e56e0bf - () https://git.kernel.org/stable/c/66d9c2ed081f299cfb201d9e9c4faf920e56e0bf - Patch
References () https://git.kernel.org/stable/c/aae1498c59f48d03ee358df84f07a5af9885f827 - () https://git.kernel.org/stable/c/aae1498c59f48d03ee358df84f07a5af9885f827 - Patch
References () https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87 - () https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87 - Patch
References () https://git.kernel.org/stable/c/e02897c5b041c9b980055fa9a6167023d6dc5caf - () https://git.kernel.org/stable/c/e02897c5b041c9b980055fa9a6167023d6dc5caf - Patch
References () https://git.kernel.org/stable/c/f1862dbf09080254c52175a448290c784dd7d3de - () https://git.kernel.org/stable/c/f1862dbf09080254c52175a448290c784dd7d3de - Patch

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/66d9c2ed081f299cfb201d9e9c4faf920e56e0bf -
  • () https://git.kernel.org/stable/c/aae1498c59f48d03ee358df84f07a5af9885f827 -
  • () https://git.kernel.org/stable/c/e02897c5b041c9b980055fa9a6167023d6dc5caf -

28 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-28 10:16

Updated : 2026-06-11 03:01

NVD link : CVE-2026-46184

Mitre link : CVE-2026-46184

CVE.ORG link : CVE-2026-46184

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero