EUVD-2026-55301

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer utimer TRIGGER ioctl calls sndtimerinterrupt directly with no serialization, so two threads triggering the same utimer can run...

CVE-2026-68200

The Linux kernel ALSA timer vulnerability CVE-2026-68200 allows a use-after-free when a utimer callback is still running and a second interrupt re-queues the same instance. The fix prevents re-queuing an in-flight callback by not adding it (and its slaves) to the ack/sack list while the callback ...