{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"b014cc945baba75816cda0cf8934be87c9ed4947","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"},{"lessThan":"c5c5a6c53cf3b658f1d4512dfa61f3cd25bc34ba","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"},{"lessThan":"b267255c15d2a5b90c4e926146aa155e5161e264","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"},{"lessThan":"3d542cf3c4c854cdf5d58049771f68926b9eb2b9","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"},{"lessThan":"3d4f23885e4b90347c9a1d779af6e79a99b5172a","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"},{"lessThan":"df1d8abf36ca3681c21a6809eaa9a1e01ef897a6","status":"affected","version":"6c0a2078134aba6a77291554035304df9e16b85c","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-43436","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces\n\nThe Scarlett2 mixer quirk in USB-audio driver may hit a NULL\ndereference when a malformed USB descriptor is passed, since it\nassumes the presence of an endpoint in the parsed interface in\nscarlett2_find_fc_interface(), as reported by fuzzer.\n\nFor avoiding the NULL dereference, just add the sanity check of\nbNumEndpoints and skip the invalid interface.","epss":{"date":"2026-11-06","percentile":0.02032,"score":0.00123},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979773865,"publishedAt":1778250126632,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b014cc945baba75816cda0cf8934be87c9ed4947"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c5c5a6c53cf3b658f1d4512dfa61f3cd25bc34ba"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b267255c15d2a5b90c4e926146aa155e5161e264"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3d542cf3c4c854cdf5d58049771f68926b9eb2b9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3d4f23885e4b90347c9a1d779af6e79a99b5172a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/df1d8abf36ca3681c21a6809eaa9a1e01ef897a6"}],"remediation":[],"revision":"6b75935e584fc08ba8a7f2d14009e53bc1e2bc07f13fdd7e7a61e36aa441c7b3","sources":[{"modifiedAt":1793979773865,"name":"CNA: Linux","retrievedAt":1793981707448,"url":"https://www.cve.org/CVERecord?id=CVE-2026-43436"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981731605,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43436"}],"ssvc":{"assessedAt":1793979511604,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces","updatedAt":1793981731605}