{"id":"CVE-2026-46184","title":"sound: ua101: fix division by zero at probe","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsound: ua101: fix division by zero at probe\n\nAdd a missing sanity check for bNrChannels in detect_usb_format()\nto prevent a division by zero in playback_urb_complete() …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < e02897c5b041c9b980055fa9a6167023d6dc5caf","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < aae1498c59f48d03ee358df84f07a5af9885f827","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 66d9c2ed081f299cfb201d9e9c4faf920e56e0bf","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 6162e8212e88c39492d981b248b5e37002486c66","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 0ff2b713f406e9ecadb406014d74e7a020ac12b1","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < f1862dbf09080254c52175a448290c784dd7d3de","Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < d1f73f169c1014463b5060e3f60813e13ddc7b87","Linux 2.6.34"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:11:26.887350Z"},"published":"2026-05-28","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:13:43.607Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46184","references":[{"url":"https://git.kernel.org/stable/c/e02897c5b041c9b980055fa9a6167023d6dc5caf"},{"url":"https://git.kernel.org/stable/c/aae1498c59f48d03ee358df84f07a5af9885f827"},{"url":"https://git.kernel.org/stable/c/66d9c2ed081f299cfb201d9e9c4faf920e56e0bf"},{"url":"https://git.kernel.org/stable/c/6162e8212e88c39492d981b248b5e37002486c66"},{"url":"https://git.kernel.org/stable/c/593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983"},{"url":"https://git.kernel.org/stable/c/0ff2b713f406e9ecadb406014d74e7a020ac12b1"},{"url":"https://git.kernel.org/stable/c/f1862dbf09080254c52175a448290c784dd7d3de"},{"url":"https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87"}],"tags":["cve.org"],"epss":0.00128,"epssPercentile":0.02467,"ingestedAt":"2026-11-06T16:57:43.326Z","slug":"CVE-2026-46184","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsound: ua101: fix division by zero at probe\n\nAdd a missing sanity check for bNrChannels in detect_usb_format()\nto prevent a division by zero in playback_urb_complete() and\ncapture_urb_complete().\n\nUSB core does not validate class-specific descriptor fields such\nas bNrChannels, so drivers must verify them before use. If a\ndevice provides bNrChannels = 0, frame_bytes becomes zero and is\nlater used as a divisor in the URB completion handlers, leading\nto a kernel crash.\n\n## Affected\n\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < e02897c5b041c9b980055fa9a6167023d6dc5caf`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < aae1498c59f48d03ee358df84f07a5af9885f827`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 66d9c2ed081f299cfb201d9e9c4faf920e56e0bf`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 6162e8212e88c39492d981b248b5e37002486c66`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < 0ff2b713f406e9ecadb406014d74e7a020ac12b1`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < f1862dbf09080254c52175a448290c784dd7d3de`\n- `Linux >= 63978ab3e3e963db28093b53bb4598f2702e1ad7 < d1f73f169c1014463b5060e3f60813e13ddc7b87`\n- `Linux 2.6.34`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}