CVE-2026-98428

A flaw was found in the Linux kernel's ALSA USB 6fire audio driver. The driver improperly embeds USB Request Blocks URBs—structures that manage USB communications—directly inside driver objects rather than allocating them dynamically. Because URBs rely on reference counting and can be released...

UBUNTU-CVE-2026-98428

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...

DEBIAN-CVE-2026-80973

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...