CVE-2026-93808
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: caiaq: validate EP1 reply lengths usb_ep1_command_reply_dispatch() uses buf[0] as a command byte and then reads command-specific fixed items from the same URB buffer. Several paths use buf + 1, buf[1], buf[2], or buf + 3 without first proving that urb->actual_length contains those bytes. Add per-command length checks, use a payload length derived from the bytes after the command byte for the control-state copy, and reject short analog input payloads before the input helper reads fixed offsets from the EP1 reply.
Affected versions
Linux kernel versions
2.6.22
and later are affected. Fixed in
5.10.271,
5.15.222,
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-93808?
CVE-2026-93808 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.22 onward and has been patched in 5.10.271, 5.15.222, 6.1.189 and others. CVE-2026-93808 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-93808?
Yes. CVE-2026-93808 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others. If you are running Linux kernel 2.6.22 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-93808 actively exploited?
No. CVE-2026-93808 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.