目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2026-64478— ALSA: usb-audio DualSense kobject路径查找漏洞

AI 预测 5.5 利用难度: 困难 EPSS 0.18% · P8

可能的 ATT&CK 技术 1AI

T1211 · Exploitation for Stealth

影响版本矩阵 27

厂商产品版本范围状态
LinuxLinuxd0b0264009596c07a77d82808b0dae72bc04ac5c< e4c66a149c408e44e60bfec3fabf08b6b7abbc60affected
b4b94f092f193d7a2db8e82af5e51519ae89963c< 4566bf8ae9dbfe81bdc2ff1702d59db8a233b06eaffected
c2d5b0a6c688ffb32c35627e337fbbcc65bc275f< 662a1d7b5affc424ea4f4bc20dd99be29e687886affected
d04d301614630724feb4048bf17432fc7964fe74< a47ecd904c51ae6a42957feb3cf2f4266adee2e5affected
a705899ec6085b12a33aa0fd94a58e82e9e90502< c1da6d3f45036fa63672ee04ad97cb526b40b987affected
79d561c4ec0497669f19a9550cfb74812f60938b< a263eb12cbe2e208e6e637df0f9b0be9a484158eaffected
79d561c4ec0497669f19a9550cfb74812f60938b< 4246dd043b7a4f8e3bc1d2896e81d11220610edaaffected
79d561c4ec0497669f19a9550cfb74812f60938b< 7693c0cc415f3a16a7a3355f245474a5e661be4eaffected
… +19 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2026-64478 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
ALSA: usb-audio: avoid kobject path lookup in DualSense match
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match The DualSense jack-detection input handler verifies that a matching input device belongs to the same physical controller by building kobject path strings for both the input device and the USB audio device, then comparing the path prefix. This was observed when a weak physical connection caused the controller to rapidly disconnect and reconnect. During that repeated hotplug, snd_dualsense_ih_match() can run while the controller's USB device is being disconnected. kobject_get_path() walks ancestor kobjects and dereferences their names; if the USB device kobject name is no longer valid, this can fault in strlen(): RIP: 0010:strlen+0x10/0x30 Call Trace: kobject_get_path+0x34/0x150 snd_dualsense_ih_match+0x49/0xd0 [snd_usb_audio] input_register_device+0x566/0x6a0 ps_probe+0xb89/0x1590 [hid_playstation] The same ownership check can be done without building kobject path strings. The input device is parented below the HID device, USB interface and USB device, so walking the input device parent chain and comparing against the mixer USB device preserves the check without dereferencing kobject names during disconnect.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux d0b0264009596c07a77d82808b0dae72bc04ac5c ~ e4c66a149c408e44e60bfec3fabf08b6b7abbc60 -
LinuxLinux 6.17 -

二、漏洞 CVE-2026-64478 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-64478 的情报信息

请登录查看更多情报信息。

CVE-2026-64478 补丁与修复 (8)

同批安全公告 · Linux · 2026-07-25 · 共 274 条

CVE-2026-643559.8 CRITICALBPF devmap 拒绝分帧帧漏洞
CVE-2026-644599.8 CRITICALTCP: tcp_ao_destroy_sock 中恢复 RCU 宽限期的漏洞
CVE-2026-643039.8 CRITICALfsl-lpspi驱动中TX准备失败时RX通道未终止
CVE-2026-644399.8 CRITICALkrb5 crypto 异步AEAE实现分配时过滤漏洞
CVE-2026-644109.8 CRITICALnetfilter flowtable IPIP隧道硬件卸载不支持
CVE-2026-643999.8 CRITICALksmbd FSCTL_DUPLICATE_EXTENTS_TO_FILE权限检查漏洞
CVE-2026-643979.8 CRITICALksmbd QUERY_DIRECTORY请求未序列化
CVE-2026-643919.8 CRITICALksmbd ADS I/O漏洞：使用opener凭据
CVE-2026-643879.8 CRITICALSMB客户端查询目录重放双重释放漏洞
CVE-2026-643869.8 CRITICALSMB 客户端 query_info() 双重释放漏洞
CVE-2026-643859.8 CRITICALsmb客户端 SMB2_ioctl() 重放时的双重释放漏洞
CVE-2026-643839.8 CRITICALsmb客户端SMB2_flush()重放时双重释放漏洞
CVE-2026-643849.8 CRITICALSMB客户端变更通知重放双释放漏洞
CVE-2026-642689.8 CRITICALRDMA/siw: Read响应绑定RREAD长度
CVE-2026-645239.8 CRITICALnet/handshake：提交时持有长期文件引用
CVE-2026-642699.1 CRITICALRDMA/rtrs-srv 远程写入长度限制漏洞
CVE-2026-643209.1 CRITICALnvmet: Discovery Get Log Page 预认证堆越界读取漏洞
CVE-2026-642579.1 CRITICALSMB 客户端拒绝SMB2响应中重叠数据区
CVE-2026-643939.1 CRITICALksmbd 使用打开者凭据运行 set info 的漏洞
CVE-2026-643929.1 CRITICALksmbd 删除时关闭权限验证漏洞

显示前 20 条，共 274 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-64478

暂无评论

发表评论