{"id":"CVE-2026-46091","title":"media: rc: igorplugusb: heed coherency rules","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: igorplugusb: heed coherency rules\n\nIn a control request, the USB request structure\ncan be subject to DMA on some HCs. Hence it must obey\nthe rules for DMA co…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < bc04b8633b375af6ac8a8bb615258b80fe06cdaa","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 81f0fb813e4bf28b3ca28dc218938a32eb48f740","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0e84aa8fc23c7578f105e3a2160f9d0aa2bed79a","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 18d6a7c9e4e63c57157e9a57dd9bf3cd38e4c45a","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0be8fcd9005e3d3b5a61fe34b070a9663adbb4dc","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0adac0ee2c42027d80bac02ea9b576a88f8955d3","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < a62ca67e3c72fb297dc7c86495ba8f7329d7f150","Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < eac69475b01fe1e861dfe3960b57fa95671c132e","Linux 3.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:08:15.253184Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:13:37.361Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46091","references":[{"url":"https://git.kernel.org/stable/c/bc04b8633b375af6ac8a8bb615258b80fe06cdaa"},{"url":"https://git.kernel.org/stable/c/81f0fb813e4bf28b3ca28dc218938a32eb48f740"},{"url":"https://git.kernel.org/stable/c/0e84aa8fc23c7578f105e3a2160f9d0aa2bed79a"},{"url":"https://git.kernel.org/stable/c/18d6a7c9e4e63c57157e9a57dd9bf3cd38e4c45a"},{"url":"https://git.kernel.org/stable/c/0be8fcd9005e3d3b5a61fe34b070a9663adbb4dc"},{"url":"https://git.kernel.org/stable/c/0adac0ee2c42027d80bac02ea9b576a88f8955d3"},{"url":"https://git.kernel.org/stable/c/a62ca67e3c72fb297dc7c86495ba8f7329d7f150"},{"url":"https://git.kernel.org/stable/c/eac69475b01fe1e861dfe3960b57fa95671c132e"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.0206,"ingestedAt":"2026-11-06T16:57:43.339Z","slug":"CVE-2026-46091","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: igorplugusb: heed coherency rules\n\nIn a control request, the USB request structure\ncan be subject to DMA on some HCs. Hence it must obey\nthe rules for DMA coherency. Allocate it separately.\n\n## Affected\n\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < bc04b8633b375af6ac8a8bb615258b80fe06cdaa`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 81f0fb813e4bf28b3ca28dc218938a32eb48f740`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0e84aa8fc23c7578f105e3a2160f9d0aa2bed79a`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 18d6a7c9e4e63c57157e9a57dd9bf3cd38e4c45a`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0be8fcd9005e3d3b5a61fe34b070a9663adbb4dc`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < 0adac0ee2c42027d80bac02ea9b576a88f8955d3`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < a62ca67e3c72fb297dc7c86495ba8f7329d7f150`\n- `Linux >= b1c97193c6437a6083da67f8e97c8ee29b2f1989 < eac69475b01fe1e861dfe3960b57fa95671c132e`\n- `Linux 3.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}