SB20260816226 - Use of Uninitialized Variable in Linux kernel usb

Description

This security bulletin contains information about 1 vulnerability.

1) Use of Uninitialized Variable (CVE-ID: CVE-2026-74500)

CWE-ID: CWE-457 - Use of Uninitialized Variable

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to uninitialized memory in snd_rme_digiface_read_status() when handling a short vendor control-IN transfer from a USB device. A local user can trigger a short read and read the exposed data through /dev/snd/controlC* to disclose sensitive information.

The issue affects the RME Digiface status controls and can expose the full 16-byte status frame to user space.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/441aaad150c57edaf57ee482a79a3bf4c5b7e353
• https://git.kernel.org/stable/c/7ba01e0d3539d9cf0aef3e82938f1648147744cc
• https://git.kernel.org/stable/c/98dbfbb38e297c25c5b0af4a9018d71ac25e8554
• https://git.kernel.org/stable/c/b3a346d5c99dd73cf84711f2a43e42691990efd2