CVE-2026-80971

A flaw was found in the ALSA bcd2000 driver of the Linux kernel. When a USB device using this driver is disconnected while a rawmidi substream is still active, the driver fails to clear the Universal Serial Bus Request Block URB pointers. This oversight allows a local attacker to trigger a...

CVE-2022-50229

CVE-2022-50229 is a Linux kernel vulnerability in the ALSA bcd2000 driver. The issue is a use-after-free (UAF) bug that occurs on the error path during probing: when snd_card_register() fails, the driver frees midi_out_urb before it is killed, enabling a UAF condition. The observed log pattern me...

PT-2022-34447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A use-after-free UAF bug was discovered in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34329

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.210 Description A use-after-free UAF bug was found in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.2 Description A use-after-free UAF bug was found in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...