{"id":"CVE-2026-20580","kind":"vulnerability","aliases":["CVE-2026-20580"],"related":[],"title":"Linux USB driver use-after-free can crash the system locally","description":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752.","summary":"A use-after-free bug in the USB subsystem can crash the device. An attacker who already holds System privilege on the device can trigger a local denial of service.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mediatek","usb"],"not_affected_if":["no-system-privilege-attacker"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T03:17:35+00:00","first_seen_at":"2026-11-02T03:31:25+00:00","triaged_at":"2026-11-02T03:32:16+00:00","updated_at":"2026-11-02T03:32:16+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-02T03:32:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux USB driver use-after-free can crash the system locally","impact":"low","summary":"A use-after-free bug in the USB subsystem can crash the device. An attacker who already holds System privilege on the device can trigger a local denial of service.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","mediatek","usb"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local denial of service: the system crashes after privilege is already obtained","analyst_note":"Confirm the affected products and patched Android security bulletin version for ALPS11412004 / MSV-9752 from the vendor bulletin.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-system-privilege-attacker"],"who_is_affected":"The sources do not name the exact product or firmware versions affected; the patch reference is an ALPS (MediaTek) patch ID, so the affected devices are likely Android or embedded devices using that platform. Only devices where an attacker already holds System privilege are at risk, and no user interaction is needed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000629,"input_tokens":4084,"output_tokens":441,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-20580':15A,18A '-9752':98C 'actor':78C 'alps11412004':94C 'alreadi':40B,80C 'android':19B 'attack':38B 'bug':28B 'could':68C 'crash':9A,34B,61C 'cve':13A,16A 'denial':51B,72C 'devic':36B,46B 'driver':3A 'due':62C 'exploit':91C 'free':7A,27B,66C 'hold':41B 'id':93C,96C 'infrastructur':20B 'interact':86C 'issu':95C 'lead':69C 'linux':1A 'local':12A,50B,71C 'malici':77C 'mediatek':21B 'msv':97C 'need':89C 'obtain':81C 'patch':92C 'possibl':59C 'privileg':43B,84C 'servic':53B,74C 'subsystem':32B 'system':11A,42B,60C,83C 'trigger':48B 'usb':2A,22B,31B,55C 'use':5A,25B,64C 'use-after-fre':4A,24B 'user':85C","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the exact product or firmware versions affected; the patch reference is an ALPS (MediaTek) patch ID, so the affected devices are likely Android or embedded devices using that platform. Only devices where an attacker already holds System privilege are at risk, and no user interaction is needed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","mediatek","unknown","usb"],"first_public_at":"2026-11-02T03:17:35+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-20580","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20580","severity":null,"published_at":"2026-11-02T03:17:35+00:00","modified_at":"2026-11-02T03:17:35+00:00","first_seen_at":"2026-11-02T03:31:25+00:00","fetched_at":"2026-11-02T03:31:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}