The Linux kernel sound subsystem contains a flaw where the bNrChannels field from a USB audio device is not validated. If an attacker supplies a device with bNrChannels set to zero, the driver calculates a zero frame size and later uses it as a divisor in the URB completion handlers, causing a division‑by‑zero exception that crashes the kernel. The crash results in a kernel panic and an immediate reboot, temporarily disrupting all services on the affected machine.

All Linux kernel releases that include the buggy sound:ua101 driver code are vulnerable. The advisory does not list specific versions, so any system running a kernel prior to the commit that introduced the check should be considered at risk until it applies the corresponding update. This includes mainstream distributions that ship the upstream kernel without the patch.

The flaw is a direct result of insufficient input validation (CWE‑369). Based on the description, it is inferred that the attack vector requires a physical or local connection of a malicious USB audio device; network‑based exploitation is unlikely. The CVSS score of 5.5 indicates a moderate impact, and the EPSS score of < 1% indicates a low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, suggesting no known public exploits. Because the kernel crash eliminates system availability, it poses a significant operational risk for affected systems.