Answer in brief
CVE-2026-46146 records a Unknown severity vulnerability in ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=786571b10b1ae6d90e1242848ce78ee7e1d493c4 <076d5d13eb9c1ad259a7f246149f6676c62285f9 || >=275e37532e8ebe25e8a4069b2d9f955bfd202a46 <316aa0b1e3c5600eae5ab876394c1ac70e6db581 || >=47ab3d820cb0a502bd0074f83bb3cf7ab5d79902 <24a40df79307ca7ca0eec0889361cf6ac146d72a || >=1034719fdefd26caeec0a44a868bb5a412c2c1a5 <e0e3dcf48189603f3865f1a0b799b3b42baae96d || >=ae17b3b5e753efc239421d186cd1ff06e5ac296e <4e0ee232ebe3df04874125d7c7f3e6c25ea5483d || >=ecfd41166b72b67d3bdeb88d224ff445f6163869 <be09b47ed8677d76962e3240c145502e2ad9f3c8 || >=ecfd41166b72b67d3bdeb88d224ff445f6163869 <fa5b19ce69067874b1413f3c2027563bae8c2cb3 || >=ecfd41166b72b67d3bdeb88d224ff445f6163869 <6e7247d8f5fefeceb0bb9cc80a5388a636b219cd || 799c06ad4c9c790c265e8b6b94947213f1fb389c || dfdcbcde5c20df878178245d4449feada7d5b201 || 7ef3fd250f84494fb2f7871f357808edaa1fc6ce || >=5.10.241 <5.10.258 || >=5.15.190 <5.15.209 || >=6.1.149 <6.1.175 || >=6.6.103 <6.6.140 || >=6.12.43 <6.12.88 || >=5.4.297 <5.5 || >=6.15.11 <6.16 || >=6.16.2 <6.17 | 076d5d13eb9c1ad259a7f246149f6676c62285f9, 316aa0b1e3c5600eae5ab876394c1ac70e6db581, 24a40df79307ca7ca0eec0889361cf6ac146d72a, e0e3dcf48189603f3865f1a0b799b3b42baae96d, 4e0ee232ebe3df04874125d7c7f3e6c25ea5483d, be09b47ed8677d76962e3240c145502e2ad9f3c8, fa5b19ce69067874b1413f3c2027563bae8c2cb3, 6e7247d8f5fefeceb0bb9cc80a5388a636b219cd, 5.10.258, 5.15.209, 6.1.175, 6.6.140, 6.12.88, 5.5, 6.16, 6.17 |
| Linux/Linuxgeneric | 6.17 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
May 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to validate cs_desc->wLength itself, which may lead to potential endless loop by a malformed descriptor. Add a proper size check to abort the loop for plugging the hole.
Quoted source text, attributed separately from HOL analysis.