{"id":"CVE-2026-93056","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: remove broken string configfs attributes\n\nThe UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for\nthe fn_play, fn_cap, and fn_…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: remove broken string configfs attributes\n\nThe UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for\nthe fn_play, fn_cap, and fn_…","severity":"medium","vendor":"Linux","product":"Linux","affected":["Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 745adfe6c337f3d5d7737d57529d14a208151b45","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 6351ba62778f72dc4f6bc18bfa99e618829cff0d","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 021b58ac3e58cffa68ed9585ff492a19e98414f6","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 8b9335aec93975bb9186d63993a5a610e5066ffc","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 2ed25c9d4400cf90d9201657963a231c27a5ea57","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 977659adb341f6e30fb00dcf183f63f29df879e2","Linux >= 0854611a19ae4dfa56569e6f640017a1d2dd3312 < 590d74ec8f488e06b9f1c0f8f0941f45531f3a55","Linux 3.18"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:59.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93056","references":[{"url":"https://git.kernel.org/stable/c/021b58ac3e58cffa68ed9585ff492a19e98414f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2ed25c9d4400cf90d9201657963a231c27a5ea57","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/590d74ec8f488e06b9f1c0f8f0941f45531f3a55","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6351ba62778f72dc4f6bc18bfa99e618829cff0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/745adfe6c337f3d5d7737d57529d14a208151b45","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8b9335aec93975bb9186d63993a5a610e5066ffc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/977659adb341f6e30fb00dcf183f63f29df879e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fd43eae7d539ea7cfc7c9f0d3f0eaa890415e8a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93056.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-93056"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536811"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93056"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93056"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93056.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ingestedAt":"2026-09-17T16:21:47.769Z","epss":0.00176,"epssPercentile":0.07425,"cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-476"],"slug":"CVE-2026-93056","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: remove broken string configfs attributes\n\nThe UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for\nthe fn_play, fn_cap, and fn_cntl string options. The store function\ncontains an inverted null check on the kstrndup() return value.\n\nThis means every write attempt returns -ENOMEM on success and\ndereferences a NULL pointer on allocation failure. The attributes\nhave been broken and unused for many years.\n\nRemove the UAC1_STR_ATTRIBUTE macro and the three attributes it\ngenerated. The internal defaults (FILE_PCM_PLAYBACK, FILE_PCM_CAPTURE,\nFILE_CONTROL) set in f_audio_alloc_inst() are unaffected.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93056.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":208918,"id":"CVE-2026-93056","ts":1790062285275,"field":"cvss","old":null,"new":"5.5"},{"seq":208917,"id":"CVE-2026-93056","ts":1790062285275,"field":"severity","old":"none","new":"medium"}]}