CVE-2026-31620

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

A NULL pointer dereference vulnerability was found in the Linux kernel's ALSA driver for the TASCAM US-144MKII device. A malicious USB device can have a configuration with interface number 1 but missing interface 0, leading to a system crash.

Risk Assessment

An attacker can exploit this vulnerability by plugging in a crafted USB device, potentially causing a denial of service (DoS) through system hang or crash.

Recommendation

Immediately update the Linux kernel to a version containing the fix that addresses the NULL dereference in the ALSA driver for TASCAM US-144MKII.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A malicious USB device with the TASCAM US-144MKII device id can have a configuration containing bInterfaceNumber=1 but no interface 0. USB configuration descriptors ar