CLSA-2025-1757961864 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: A UAF bug was fixed in the error path of the probing process. When the driver fails in sndcardregister during the probing phase, it will free the bcd2k-midiouturb before terminating it, which could lead to a UAF bu...

CVE-2026-80971

A flaw was found in the ALSA bcd2000 driver of the Linux kernel. When a USB device using this driver is disconnected while a rawmidi substream is still active, the driver fails to clear the Universal Serial Bus Request Block URB pointers. This oversight allows a local attacker to trigger a...

CVE-2026-80971

CVE-2026-80971 is a use-after-free vulnerability in the ALSA bcd2000 driver (snd_bcd2000) of the Linux kernel. On USB device disconnect, bcd2000_free_usb_related_resources() frees both MIDI URBs without clearing the pointers. A still-open rawmidi substream can then access the freed URBs via the t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993007 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in sndcardregiste...

kernel: ALSA: bcd2000: Fix a UAF bug on the error path of probing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Behringer BCD2000 driver. A local user could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. This issue occurs when device initialization fails during...

kernel: ALSA: bcd2000: Fix a UAF bug on the error path of probing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Behringer BCD2000 driver. A local user could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. This issue occurs when device initialization fails during...

Linux Distros Unpatched Vulnerability : CVE-2022-50229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in sndcardregister at probe time, it will free the 'bcd2k-midiouturb' before...

CVE-2022-50229

CVE-2022-50229 is a Linux kernel vulnerability in the ALSA bcd2000 driver. The issue is a use-after-free (UAF) bug that occurs on the error path during probing: when snd_card_register() fails, the driver frees midi_out_urb before it is killed, enabling a UAF condition. The observed log pattern me...

CVE-2022-50229 ALSA: bcd2000: Fix a UAF bug on the error path of probing

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in sndcardregister at probe time, it will free the 'bcd2k-midiouturb' before killing it, which may cause a UAF bug. The following log can reveal it:...

PT-2025-26155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF bug has been identified in the Linux kernel's ALSA Advanced Linux Sound Architecture component, specifically in the bcd2000 driver. This issue occurs when the driver...

PT-2022-34447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A use-after-free UAF bug was discovered in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34329

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.210 Description A use-after-free UAF bug was found in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.2 Description A use-after-free UAF bug was found in the error path of probing in the ALSA bcd2000 driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...