CVE-2026-20583
MediumCVSS 4.4Summary
In the USB component, there is a use-after-free vulnerability that could lead to a system crash. Exploitation requires System privileges but no user interaction.
Risk Assessment
A local attacker with System privileges could cause a denial of service (system crash). The risk mainly affects devices with a compromised or privileged environment.
Recommendation
Apply the update containing patch ALPS11411916. Restrict access to System privileges and monitor unusual USB-related crashes.
Other vulnerabilities in USB
See all- CVE-2026-20584Medium
In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2026-20582Medium
In the USB component, there is a double-free vulnerability leading to memory corruption. It could enable local privilege escalation for an actor who already holds System privileges.
- CVE-2026-20581Medium
In the USB component, there is a use-after-free vulnerability causing memory corruption. It could lead to local privilege escalation by an actor who already has System privileges.
- CVE-2026-20580Medium
In the USB component, there is a use-after-free vulnerability that could cause a system crash. Exploitation requires System privileges and no user interaction.
Original NVD description (English source)
In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS