{
  "cveId": "CVE-2026-23208",
  "url": "https://patchblox.com/security/cve/CVE-2026-23208",
  "summary": "CVE-2026-23208 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2026-23208, released February 14, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: usb-audio: Prevent excessive number of fra...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ALSA: usb-audio: Prevent excessive number of frames  In this case, the user constructed the parameters with maxpacksize 40 for rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buffer size for each data URB is maxpacksize * packets, which in this example is 40 * 6 = 240; When the user performs a write operation to send audio data into the ALSA PCM playback stream, the calculated number of frames is packsize[0] * packets = 264, which exceeds the allocated URB buffer size, triggering the out-of-bounds (OOB) issue reported by syzbot [1].  Added a check for the number of single data URB frames when calculating the number of frames to prevent [1].  [1] BUG: KASAN: slab-out-of-bounds in copy_to_urb\u002B0x261/0x460 sound/usb/pcm.c:1487 Write of size 264 at addr ffff88804337e800 by task syz.0.17/5506 Call Trace:  copy_to_urb\u002B0x261/0x460 sound/usb/pcm.c:1487  prepare_playback_urb\u002B0x953/0x13d0 sound/usb/pcm.c:1611  prepare_outbound_urb\u002B0x377/0xc50 sound/usb/endpoint.c:333",
  "published": "2026-02-14T17:15:58Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00186,
  "epssPercentile": 0.0824,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1.160000.2.8",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1.150700.17.23.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1.160000.2.8",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_10",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "fix": "SUSE-SU-2026:0962-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0962-1",
      "released": "2026-03-23T09:09:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_10",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "OPENSUSE-SU-2026:20416-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1",
      "released": "2026-03-25T08:49:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.34.1",
      "fix": "SUSE-SU-2026:1081-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1081-1",
      "released": "2026-03-26T13:23:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.27.1",
      "fix": "SUSE-SU-2026:20931-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20931-1",
      "released": "2026-03-25T08:48:43Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-2",
      "fix": "DEBIAN-CVE-2026-23208",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23208",
      "released": "2026-02-14T17:15:58Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.18.10-1",
      "fix": "DEBIAN-CVE-2026-23208",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23208",
      "released": "2026-02-14T17:15:58Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}