A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2. Affected is the function
usblp_ctrl_msg of the component usb. The manipulation leads to uninitialized pointer.
This vulnerability is traded as CVE-2026-46151. Access to the local network is required for this attack to succeed. There is no exploit available.
It is suggested to upgrade the affected component.
