CVE-2026-122113 · Infrastructure
NO FIX YET
Realtek's RtUsbA64.sys USB audio driver recurses without limit when parsing a crafted USB device's topology descriptor during enumeration. The kernel stack is exhausted, so the system crashes (bugcheck), which is a denial of service.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Systems with Realtek's RtUsbA64.sys USB audio driver loaded are exposed, and the attack needs physical access to plug in a malicious USB device. The sources do not name the affected driver versions or products. Systems without this driver, or with no physical access exposure, can skip it.
Not affected if no-physical-usb-access, no-realtek-usb-audio-driver
Who cares realtek, usb-audio, windows
RtUsbA64.sys in C:\Windows\System32\drivers\No fix yet, per the sources.
A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.