CVE-2026-122113

CVE-2026-122113CVE-2026-122113

Description

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Scoring

Last modified2026-11-06
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.