SB20260815326 - NULL pointer dereference in Linux kernel usb

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-72403)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows an attacker with physical access to cause a denial of service.

The vulnerability exists due to a NULL pointer dereference in fcp_find_fc_interface() in the ALSA FCP USB audio driver when processing a malformed USB device with a vendor-specific interface that has no endpoint descriptors. An attacker with physical access can connect a specially crafted USB device to trigger a kernel crash and cause a denial of service.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3ab06151ffcb8c3aeb8f78508658b6c0f05be932
• https://git.kernel.org/stable/c/e1e31e0ec8a609e17fd2e86b77bc00d9cbb24d7c
• https://git.kernel.org/stable/c/f28d7b5f1578a7501ab17b10643ed1e4f729187e