CVE-2026-74499

🗓️ 15 Aug 2026 12:27:25Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

Linux kernel ALSA usb-audio OOB write in snd_usbmidi_akai_output via negative loop bound.

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2026-74499	15 Aug 202612:27	–	attackerkb
Cvelist	CVE-2026-74499 ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()	15 Aug 202612:27	–	cvelist
Debian	[SECURITY] [DSA 6466-1] linux security update	25 Aug 202620:09	–	debian
Debian CVE	CVE-2026-74499	15 Aug 202612:27	–	debiancve
Tenable Nessus	Debian dsa-6466 : ata-modules-6.12.101+deb13-armmp-di - security update	25 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	12 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-74499	15 Aug 202600:00	–	nessus
Oracle linux	Unbreakable Enterprise kernel security update	4 Sep 202600:00	–	oraclelinux
EUVD	EUVD-2026-59692	15 Aug 202612:27	–	euvd
NVD	CVE-2026-74499	15 Aug 202613:17	–	nvd

Vulners

CNA

Node

linux linux_kernelRange2.6.35–5.10.265

linux linux_kernelRange5.11.0–5.15.216

linux linux_kernelRange5.16.0–6.1.183

linux linux_kernelRange6.2.0–6.6.151

linux linux_kernelRange6.7.0–6.12.103

linux linux_kernelRange6.13.0–6.18.44

linux linux_kernelRange6.19.0–7.1.8

linux linux_kernelRange7.2.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/usb/midi.c"
    ],
    "versions": [
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "78dfdeb8d2065524ed5928d6470bf3d3244d1009",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "00cc659a42ac4e94ec880fae2c9bf22fce69c2e8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "ce949d66607cfb000b8d8d84f80f35a886e72683",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "29a4c29943631301e85f5e9d10f25741bd78e7ba",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "9b22a5c8310b0d55d04f5f0159b913a2fb8b444f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "b5305a0d0bb8e90a6fc9f88270d5f6c9b8c40081",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "2b7a0f330dd90dd1a7657cec0db019ee1efa4372",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4434ade8c9334a3ab975d8993de456f06841899e",
        "lessThan": "0970274613fb463d376211450cab066d34ebfe6a",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/usb/midi.c"
    ],
    "versions": [
      {
        "version": "2.6.35",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.35",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.265",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.216",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.183",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.151",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.103",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.44",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.8",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/2b7a0f330dd90dd1a7657cec0db019ee1efa4372
git	www.git.kernel.org/stable/c/b5305a0d0bb8e90a6fc9f88270d5f6c9b8c40081
git	www.git.kernel.org/stable/c/ce949d66607cfb000b8d8d84f80f35a886e72683
git	www.git.kernel.org/stable/c/0970274613fb463d376211450cab066d34ebfe6a
git	www.git.kernel.org/stable/c/29a4c29943631301e85f5e9d10f25741bd78e7ba
git	www.git.kernel.org/stable/c/9b22a5c8310b0d55d04f5f0159b913a2fb8b444f
git	www.git.kernel.org/stable/c/00cc659a42ac4e94ec880fae2c9bf22fce69c2e8
git	www.git.kernel.org/stable/c/78dfdeb8d2065524ed5928d6470bf3d3244d1009

Parameter	Position	Path	Description	CWE
transfer_buffer_length	path	/dev/snd/midiCD	OOB write in ALSA usb-audio Akai output due to signed/unsigned bound check leading to heap write when writing to /dev/snd/midiCD.	CWE-787
max_transfer	path	/dev/snd/midiCD	OOB write in ALSA usb-audio Akai output due to signed/unsigned bound check leading to heap write when writing to /dev/snd/midiCD.	CWE-787
SysEx payload length	path	/dev/snd/midiCD	OOB write in ALSA usb-audio Akai output due to signed/unsigned bound check leading to heap write when writing to /dev/snd/midiCD.	CWE-787

19 Aug 2026 17:21Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.00177