CVE-2026-20580
MediumCVSS 4.4Summary
In the USB component, there is a use-after-free vulnerability that could cause a system crash. Exploitation requires System privileges and no user interaction.
Risk Assessment
An attacker with System privileges could cause a local denial of service. The risk affects device stability in privileged environments.
Recommendation
Deploy patch ALPS11412004. Monitor USB-related system crashes and restrict access to System privileges.
Other vulnerabilities in USB
See all- CVE-2026-20584Medium
In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2026-20583Medium
In the USB component, there is a use-after-free vulnerability that could lead to a system crash. Exploitation requires System privileges but no user interaction.
- CVE-2026-20582Medium
In the USB component, there is a double-free vulnerability leading to memory corruption. It could enable local privilege escalation for an actor who already holds System privileges.
- CVE-2026-20581Medium
In the USB component, there is a use-after-free vulnerability causing memory corruption. It could lead to local privilege escalation by an actor who already has System privileges.
Original NVD description (English source)
In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS