CVE-2026-122113 PUBLISHED

CVE-2026-122113

Assigner: certcc
Reserved: 04.11.2026 Published: 06.11.2026 Updated: 06.11.2026

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Product Status

Vendor Realtek
Product RtUsbA64.sys
Versions
  • Version 6.3.9600.2393 is affected

References

Problem Types

  • CWE-674