CVE-2026-92382
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
18/100
Published: 2026-09-21
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
High
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhost_iso_packet() and allowing a usbredir peer to write past the end of the packet descriptor array on every subsequent isochronous packet.
Weakness Classification (1)
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT