{"id":"CVE-2026-20584","kind":"vulnerability","aliases":["CVE-2026-20584"],"related":[],"title":"Linux USB driver: missing bounds check allows memory corruption, local privilege escalation","description":"In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746.","summary":"A missing bounds check in the USB code can corrupt memory on the device. An attacker who already holds System privilege can use it to escalate to higher privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","local-privilege-escalation","usb"],"not_affected_if":["no-system-privilege-attacker"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T03:17:36+00:00","first_seen_at":"2026-11-02T03:31:26+00:00","triaged_at":"2026-11-02T03:32:13+00:00","updated_at":"2026-11-02T03:32:13+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T03:32:13Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux USB driver: missing bounds check allows memory corruption, local privilege escalation","impact":"medium","summary":"A missing bounds check in the USB code can corrupt memory on the device. An attacker who already holds System privilege can use it to escalate to higher privileges.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["usb","local-privilege-escalation"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker with System privilege escalates to higher local privileges","analyst_note":"Identify the affected device or Android/MediaTek build from Patch ID ALPS11411916 and the vendor security bulletin, then confirm the fixed version.","how_to_check":"- unknown","plain_action":"unknown","needs_analyst":true,"not_affected_if":["no-system-privilege-attacker"],"who_is_affected":"The description names only a USB component with a Patch ID and Issue ID (ALPS11411916, MSV-9746) and does not name the device model, Android build or kernel version affected. Exploitation needs an attacker who already has System privilege, so the risk is local escalation rather than remote compromise. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000643,"input_tokens":4099,"output_tokens":467,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-20584':15A,18A '-9746':99C 'actor':79C 'allow':7A 'alps11411916':95C 'alreadi':42B,81C 'attack':40B 'bound':5A,27B,66C 'check':6A,28B,67C 'code':32B 'corrupt':9A,34B,61C 'could':69C 'cve':13A,16A 'devic':38B 'driver':3A 'due':62C 'escal':12A,23B,50B,73C 'exploit':92C 'higher':52B 'hold':43B 'id':94C,97C 'infrastructur':19B 'interact':87C 'issu':96C 'lead':70C 'linux':1A 'local':10A,21B,72C 'local-privilege-escal':20B 'malici':78C 'memori':8A,35B,60C 'miss':4A,26B,65C 'msv':98C 'need':90C 'obtain':82C 'patch':93C 'possibl':59C 'privileg':11A,22B,45B,53B,75C,85C 'system':44B,84C 'usb':2A,24B,31B,55C 'use':47B 'user':86C","nicknames":[],"mitigations":[],"who_affected":"The description names only a USB component with a Patch ID and Issue ID (ALPS11411916, MSV-9746) and does not name the device model, Android build or kernel version affected. Exploitation needs an attacker who already has System privilege, so the risk is local escalation rather than remote compromise. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","localprivilegeescalation","unknown","usb"],"first_public_at":"2026-11-02T03:17:36+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-20584","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20584","severity":null,"published_at":"2026-11-02T03:17:36+00:00","modified_at":"2026-11-02T03:17:36+00:00","first_seen_at":"2026-11-02T03:31:26+00:00","fetched_at":"2026-11-02T03:31:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}