CVE-2026-90207

CVE-2026-90207 affects the Linux kernel ALSA sequence MIDI subsystem. The vulnerability is a race condition in snd_midi_input_event(): when a rawmidi substream is being closed, a concurrent input event can re-trigger the stream after rawmidi_release_priv() sets rfile->rmidi to NULL, resulting ...

EUVD-2026-81800

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize input teardown with eventinput sndmidiinputevent must not be running while a rawmidi substream is closing, since this can lead to the trigger state becoming out-of-step through this sequence in...