Red HatCVE-2026-92382
usbredir: out-of-bounds write
Medium4.1CVE-2026-92382 · Published Sep 21, 2026 · updated Sep 22, 2026
An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhost_iso_packet() and allowing a usbredir peer to write past the end of the packet descriptor array on every subsequent isochronous packet.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 6 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 7 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 8 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 9 Product | all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-787
More Red Hat advisories
All Red Hat| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 21 | Red Hat libstoragemgmt: buffer overflow | Medium5.5 | No fix yet |
| Sep 21 | Red Hat SmallRye Fault Tolerance: resource exhaustion | High7.5 | No fix yet |
| Sep 21 | Red Hat fetchmail: stack buffer overflow | High8.1 | No fix yet |
| Sep 21 | Red Hat pki-core: improper authorization | High8.1 | No fix yet |
| Sep 21 | Red Hat OpenShift Container Platform 4: improper signature check | High7.4 | No fix yet |
| Sep 21 | Red Hat Openshift Data Foundation 4: improper signature check | High7.1 | No fix yet |