Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-122113 EUVD-2026-118417GHSA-243x-4g43-9fcq

CVE-2026-122113

Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by certcc

Description

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Affected products

VendorProductAffectedFixed
Realtek RtUsbA64.sys 6.3.9600.2393 —

References