CVE-2026-92382Disclosure

LOWCVSS 4.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhost_iso_packet() and allowing a usbredir peer to write past the end of the packet descriptor array on every subsequent isochronous packet.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-09-21); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters28d
Disclosure
CVE-2026-92382: OOB write in usbredir. A peer can write past the packet descriptor array. CVSS 4.1, no patch yet. Audit your usbredir exposure now. https://www.valtersit.com/cve/CVE-2026-92382/ #CVE #infosec #cybersecurity #Usbredir #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text announces CVE-2026-92382 and provides technical details describing an out-of-bounds write in usbredir. It reports no available patch and does not mention a PoC or active exploitation.
0000038
1.1K followersView on X
CVE@CVEnew47d
Disclosure
CVE-2026-92382 An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanentl… https://www.cve.org/CVERecord?id=CVE-2026-92382
Post summary
The tweet discloses CVE-2026-92382, an out-of-bounds write flaw in usbredir caused by starting an isochronous OUT stream with a transfer count of 1, and links to the CVE record without mentioning exploits, patches, or active exploitation.
000001.7K
58.1K followersView on X

Explore more

Back to dashboard