Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50347: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost bsc1249928. CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time bsc1252542...

Linux USB Audio Buffer Overflow DoS

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which supports USB audio devices in Linux operating systems, stems from the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker t...

kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability allows a buffer overflow and potential memory corruption via a malformed Universal MIDI Packet UMP System Exclusive SysEx message during MIDI 1.0 to UMP conversion...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37891)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37891 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21859)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21859 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fmidi: fmidicomplete to cal...

kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability allows a buffer overflow and potential memory corruption via a malformed Universal MIDI Packet UMP System Exclusive SysEx message during MIDI 1.0 to UMP conversion...

ROS-20260121-73-0013

A vulnerability in the function fmidibind component of the function/fmidi.c component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7302

A vulnerability in the fmidi component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability allows a buffer overflow and potential memory corruption via a malformed Universal MIDI Packet UMP System Exclusive SysEx message during MIDI 1.0 to UMP conversion...

[SECURITY] Fedora 42 Update: musescore-4.3.2-20.fc42

MuseScore is a free cross platform WYSIWYG music notation program. Some highlights: WYSIWYG, notes are entered on a "virtual note sheet" Unlimited number of staves Up to four voices per staff Easy and fast note entry with mouse, keyboard or MIDI Integrated sequencer and FluidSynth software...

OESA-2026-1070 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1069 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1067 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1066 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

Security update for fluidsynth (moderate)

openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2026:0014-1 Rating: moderate References: 1256435 Cross-References: CVE-2025-56225 CVSS scores: CVE-2025-56225 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004192 advisory. A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices coul...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004396 advisory. A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices coul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000941 advisory. Double free vulnerability in the sndusbmidicreate function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001205 advisory. The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001419 advisory. A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices coul...