{"cve":"CVE-2026-93808","nvd":{"published":"2026-09-24T17:17:13.797","modified":"2026-10-03T11:17:50.603","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: caiaq: validate EP1 reply lengths\n\nusb_ep1_command_reply_dispatch() uses buf[0] as a command byte and then\nreads command-specific fixed items from the same URB buffer. Several\npaths use buf + 1, buf[1], buf[2], or buf + 3 without first proving that\nurb->actual_length contains those bytes.\n\nAdd per-command length checks, use a payload length derived from the\nbytes after the command byte for the control-state copy, and reject short\nanalog input payloads before the input helper reads fixed offsets from\nthe EP1 reply.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/319393151367e6626affedcdd4f7b7b0286f4246","https://git.kernel.org/stable/c/74f3c639f64fa5da4e1613149798b5089bce2807","https://git.kernel.org/stable/c/7cc6b3745a0cea697c8d0684b3094f220281a08d","https://git.kernel.org/stable/c/91acd231f219452fa58285239f83945accad9513","https://git.kernel.org/stable/c/aba30af07d4fe499b50209801eba9da8a815522f"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:56:02.509636177+00:00"},"epss":{"cve":"CVE-2026-93808","score":0.00173,"percentile":0.06617,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}