-

CVE-2026-74642

ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

The recent fix for UAF in ump_to_endpoint() caused another UAF because
it tries to dereference the UMP endpoint object, but this might be
executed at a delayed context where the endpoint has been already
released.

Add private_free to clear the associated data for avoiding the further
dereference for delayed releases.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 49eccef6d6e1c00dac6fb2e7eb6f9206c33e1c37
Version < d431941825d357be7d9ab0cb7505e3a1963bd89e
Status affected
Version 8a7a33b846d6ba695891b8d0040027cdbad8cd52
Version < 422d8a02de5ce6a29d616d55e5ead5dec69ac1d7
Status affected
Version cc014ebf803174f0e5d15956dfc5a38413c945ae
Version < d217d723c5e43881b952cdb978477f7f2dc0b6d7
Status affected
Version ae388c0e1bf727972096f770f82d12e4f748d1b6
Version < f9d492a39ebeb1a56f13ec6dd165a18a48dec812
Status affected
Version 4a05b2d1b4642df74f30b6f54843e825c4a2bfd3
Version < f8a80cfb68613fb7e6452b66447dbc63f435d140
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6.6.151
Version < 6.6.152
Status affected
Version 6.12.103
Version < 6.12.104
Status affected
Version 6.18.44
Version < 6.18.45
Status affected
Version 7.1.8
Version < 7.1.9
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.062
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/422d8a02de5ce6a29d616d55e5ead5dec69ac1d7
https://git.kernel.org/stable/c/d217d723c5e43881b952cdb978477f7f2dc0b6d7
https://git.kernel.org/stable/c/d431941825d357be7d9ab0cb7505e3a1963bd89e
https://git.kernel.org/stable/c/f8a80cfb68613fb7e6452b66447dbc63f435d140
https://git.kernel.org/stable/c/f9d492a39ebeb1a56f13ec6dd165a18a48dec812