CVE-2026-74642

ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

N/A

Published: August 22, 2026 at 03:32 PM UTC

Updated: October 14, 2026 at 01:10 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump_to_endpoint() caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the endpoint has been already released. Add private_free to clear the associated data for avoiding the further dereference for delayed releases.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

90%

6.12.103 ≤ v < 6.12.1046.18.44 ≤ v < 6.18.456.6.151 ≤ v < 6.6.1527.1.8 ≤ v < 7.1.949eccef6d6e1c00dac6fb2e7eb6f9206c33e1c374a05b2d1b4642df74f30b6f54843e825c4a2bfd36.12.103 6.18.44 6.6.151 7.1.88a7a33b846d6ba695891b8d0040027cdbad8cd52ae388c0e1bf727972096f770f82d12e4f748d1b6cc014ebf803174f0e5d15956dfc5a38413c945ae

Vendor states this is fixed in 422d8a02de5ce6a29d616d55e5ead5dec69ac1d7 (fixed)

Vendor states this is fixed in d217d723c5e43881b952cdb978477f7f2dc0b6d7 (fixed)

Vendor states this is fixed in d431941825d357be7d9ab0cb7505e3a1963bd89e (fixed)

Vendor states this is fixed in f8a80cfb68613fb7e6452b66447dbc63f435d140 (fixed)

Vendor states this is fixed in f9d492a39ebeb1a56f13ec6dd165a18a48dec812 (fixed)

Affected range stops below 6.12.104, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.18.45, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.6.152, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.1.9, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord

https://git.kernel.org/stable/c/d431941825d357be7d9ab0cb7505e3a1963bd89e

Source: cverecord

https://git.kernel.org/stable/c/422d8a02de5ce6a29d616d55e5ead5dec69ac1d7

Source: cverecord

https://git.kernel.org/stable/c/d217d723c5e43881b952cdb978477f7f2dc0b6d7

Source: cverecord

https://git.kernel.org/stable/c/f9d492a39ebeb1a56f13ec6dd165a18a48dec812

Source: cverecord

https://git.kernel.org/stable/c/f8a80cfb68613fb7e6452b66447dbc63f435d140

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card