PT-2026-93674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the snd usbmidi us122l output function. The issue occurs when the function selects a count of 2 for devices slower than high speed without verifying it...

PT-2026-91354

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd usbmidi novation output snd usbmidi novation output lays out a two-byte header at transfer buffer0..1 and passes &transfer buffer2 together with a length of ep-max transfer - 2 to snd rawmidi...

CVE-2025-39997

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in sndusbmidifree The previous commit 0718a78f6a9f "ALSA: usb-audio: Kill timer properly at removal" patched a UAF issue caused by the error timer. However, because the error timer kill...

CVE-2025-39997 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in sndusbmidifree The previous commit 0718a78f6a9f "ALSA: usb-audio: Kill timer properly at removal" patched a UAF issue caused by the error timer. However, because the error timer kill...

CVE-2025-39997 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in sndusbmidifree The previous commit 0718a78f6a9f "ALSA: usb-audio: Kill timer properly at removal" patched a UAF issue caused by the error timer. However, because the error timer kill...

PT-2025-42271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition leading to a Use-After-Free UAF issue exists in the ALSA subsystem, specifically within the snd usbmidi free function related to USB audio. A previous commit aimed to...

PT-2025-18489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the ALSA: usb-audio component. The issue concerns the snd usbmidi output open function, which contains a check for a NULL...