Improper input validation in Linux kernel - CVE-2026-74641

Vulnerability details

The vulnerability allows a local user to read and write arbitrary kernel memory or cause a denial of service.

The vulnerability exists due to improper input validation in snd_us428ctls_vm_fault() and snd_usx2y_hwdep_pcm_vm_fault() when handling mmap page faults with a user-controlled page offset. A local user can supply a crafted mmap() offset to map a kernel page outside the allocated shared memory region to read and write arbitrary kernel memory or cause a denial of service.

Exploitation requires access to the hwdep node of an attached US-X2Y device, and in the us428 control path the FPGA image must be loaded through the same node first.

Affected software

How to mitigate CVE-2026-74641

External References

• https://git.kernel.org/stable/c/10a87401fb3148c388e55df0148295b3b137da07
• https://git.kernel.org/stable/c/2ca1eea3cd17930daffe9e429a7c89232036ec24
• https://git.kernel.org/stable/c/34ab56ed854baa73a731cfd99af689f0b1bac444
• https://git.kernel.org/stable/c/4208db2453e1ea71b8048a5b7802360cb29a53f1
• https://git.kernel.org/stable/c/5bf5ccddf00b59f1e3ea7e65d76a5f5b5c21cc2e
• https://git.kernel.org/stable/c/ad6fedea65c6e90eda00d716c8bf20cdc437ed10
• https://git.kernel.org/stable/c/f613b4a2d87247b51a1b2b330f2e083a454125f2
• https://git.kernel.org/stable/c/f75d6f61f0d9c5c1ea725104014e10d26d1e3a00

Related Security Bulletins

• Improper input validation in Linux kernel usb usx2y
• Debian update for linux