CVE-2026-72443 ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints MIDI 2.0 input URBs are started during sndusbmidiv2create. A later setup failure can still jump to sndusbmidiv2free, which currently frees each endpoint and its coheren...

PT-2026-72823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA MIDI sequence component where the event process midi function borrows msynth-output rfile.output and passes the substream to dump midi and snd rawmidi kernel...

CVE-2026-74387: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with eventinput eventprocessmidi borrows msynth-outputrfile.output and then passes the substream to dumpmidi and sndrawmidikernelwrite without synchronizing with the output open/close...

PT-2026-72631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the ALSA USB audio component. During the execution of snd usb midi v2 create, MIDI 2.0 input URBs USB Request Blocks are started. If a subsequent...

PT-2026-72954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the ALSA component of the Linux kernel. The function snd ump attach legacy rawmidi allocates a legacy conversion array ump-out cvts. If an error occurs duri...

CVE-2026-74501: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...

CVE-2026-72443: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints MIDI 2.0 input URBs are started during sndusbmidiv2create. A later setup failure can still jump to sndusbmidiv2free, which currently frees each endpoint and its coheren...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...

PT-2026-72953

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA usb-audio component. The create midi2 ump function registers a snd ump endpoint and stores a back-pointer to a snd usb midi2 ump object in the...

PT-2026-72951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap out-of-bounds write exists in the ALSA usb-audio component. The function snd usbmidi akai output calculates a loop bound using a signed integer. If a USB device advertises a very...

Linux Distros Unpatched Vulnerability : CVE-2026-74501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...

Linux Distros Unpatched Vulnerability : CVE-2026-74387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize output teardown with eventinput eventprocessmidi borrows msynth-outputrfile.output and then passes the substream to dumpmidi and...

CVE-2026-62693

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62688

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-62693

Technical details beyond the brief description are not publicly provided in the supplied documents. No concrete information on affected components, root cause specifics, or remediation is available here; monitor for official updates.

EUVD-2026-56345

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-62688

CVE-2026-62688 describes a heap-based buffer overflow in the Windows MIDI Service Module. An authorized, local attacker can elevate privileges with no user interaction (CVSS: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Documented impact is privilege escalation; no exploitation details or patch informat...