In the Linux kernel, the following vulnerability has been resolved:

sound: ua101: fix division by zero at probe

Add a missing sanity check for bNrChannels in detect_usb_format()
to prevent a division by zero in playback_urb_complete() and
capture_urb_complete().

USB core does not validate class-specific descriptor fields such
as bNrChannels, so drivers must verify them before use. If a
device provides bNrChannels = 0, frame_bytes becomes zero and is
later used as a divisor in the URB completion handlers, leading
to a kernel crash.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
63978ab3e3e963db28093b53bb4598f2702e1ad7 affected < 6162e8212e88c39492d981b248b5e37002486c66
63978ab3e3e963db28093b53bb4598f2702e1ad7 affected < 593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983
63978ab3e3e963db28093b53bb4598f2702e1ad7 affected < 0ff2b713f406e9ecadb406014d74e7a020ac12b1
63978ab3e3e963db28093b53bb4598f2702e1ad7 affected < f1862dbf09080254c52175a448290c784dd7d3de
63978ab3e3e963db28093b53bb4598f2702e1ad7 affected < d1f73f169c1014463b5060e3f60813e13ddc7b87
Linux Linux affected
Version Status Constraints
2.6.34 affected —
0 unaffected < 2.6.34
6.6.140 unaffected ≤ 6.6.*
6.12.88 unaffected ≤ 6.12.*
6.18.30 unaffected ≤ 6.18.*
7.0.7 unaffected ≤ 7.0.*
7.1-rc2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0ff2b713f406e9ecadb406014d74e7a020ac12b1 cve-icon cve-icon
https://git.kernel.org/stable/c/593dd7e6c890d8e4ca21b3e2f796b7cb8e8da983 cve-icon cve-icon
https://git.kernel.org/stable/c/6162e8212e88c39492d981b248b5e37002486c66 cve-icon cve-icon
https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87 cve-icon cve-icon
https://git.kernel.org/stable/c/f1862dbf09080254c52175a448290c784dd7d3de cve-icon cve-icon
History

Thu, 28 May 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
CWE-409

Thu, 28 May 2026 10:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrChannels in detect_usb_format() to prevent a division by zero in playback_urb_complete() and capture_urb_complete(). USB core does not validate class-specific descriptor fields such as bNrChannels, so drivers must verify them before use. If a device provides bNrChannels = 0, frame_bytes becomes zero and is later used as a divisor in the URB completion handlers, leading to a kernel crash.
Title sound: ua101: fix division by zero at probe
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-28T09:36:38.134Z

Reserved: 2026-05-13T15:03:33.103Z

Link: CVE-2026-46184

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-28T10:16:34.023

Modified: 2026-05-28T13:44:01.663

Link: CVE-2026-46184

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T14:15:18Z

Weaknesses