CVE-2026-64478

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: usb-audio: avoid kobject path lookup in DualSense match<br /> <br /> The DualSense jack-detection input handler verifies that a matching input<br /> device belongs to the same physical controller by building kobject path<br /> strings for both the input device and the USB audio device, then comparing<br /> the path prefix.<br /> <br /> This was observed when a weak physical connection caused the controller<br /> to rapidly disconnect and reconnect. During that repeated hotplug,<br /> snd_dualsense_ih_match() can run while the controller&amp;#39;s USB device is<br /> being disconnected. kobject_get_path() walks ancestor kobjects and<br /> dereferences their names; if the USB device kobject name is no longer<br /> valid, this can fault in strlen():<br /> <br /> RIP: 0010:strlen+0x10/0x30<br /> Call Trace:<br /> kobject_get_path+0x34/0x150<br /> snd_dualsense_ih_match+0x49/0xd0 [snd_usb_audio]<br /> input_register_device+0x566/0x6a0<br /> ps_probe+0xb89/0x1590 [hid_playstation]<br /> <br /> The same ownership check can be done without building kobject path<br /> strings. The input device is parented below the HID device, USB interface<br /> and USB device, so walking the input device parent chain and comparing<br /> against the mixer USB device preserves the check without dereferencing<br /> kobject names during disconnect.