CVE-2026-90207

CVE-2026-90207 affects the Linux kernel ALSA sequence MIDI subsystem. The vulnerability is a race condition in snd_midi_input_event(): when a rawmidi substream is being closed, a concurrent input event can re-trigger the stream after rawmidi_release_priv() sets rfile->rmidi to NULL, resulting ...