CVE-2026-74501

CVE-2026-74501 affects the Linux kernel ALSA usb-audio, where create_midi2_ump() stores a back-pointer to a per-interface object in ump->private_data but never clears it or installs a private_free hook. If snd_usb_midi_v2_create() fails, free_all_midi2_umps() frees the object while an already-...

CVE-2026-74501

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...

CVE-2026-74501 ALSA: usb-audio: fix use-after-free in ump_to_endpoint()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...