CVE-2026-74387 ALSA: seq: midi: Serialize output teardown with event_input

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with eventinput eventprocessmidi borrows msynth-outputrfile.output and then passes the substream to dumpmidi and sndrawmidikernelwrite without synchronizing with the output open/close...

CVE-2026-74387

Summary of CVE-2026-74387 (Linux kernel, ALSA: seq: midi) : The vulnerability stems from improper synchronization in MIDI event handling. Specifically, event_process_midi() borrows msynth->output_rfile.output and passes the substream to dump_midi() and snd_rawmidi_kernel_write() without coordi...