CVE-2026-98428

A flaw was found in the Linux kernel's ALSA USB 6fire audio driver. The driver improperly embeds USB Request Blocks URBs—structures that manage USB communications—directly inside driver objects rather than allocating them dynamically. Because URBs rely on reference counting and can be released...

DEBIAN-CVE-2026-80973

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...