CVE-2026-74642

ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

State: Published
Severity: Not scored
Published: Aug 22, 2026
Updated: Aug 22, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

The recent fix for UAF in ump_to_endpoint() caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the endpoint has been already released.

Add private_free to clear the associated data for avoiding the further dereference for delayed releases.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	49eccef6d6e1c00dac6fb2e7eb6f9206c33e1c37 to before d431941825d357be7d9ab0cb7505e3a1963bd89eAffected 8a7a33b846d6ba695891b8d0040027cdbad8cd52 to before 422d8a02de5ce6a29d616d55e5ead5dec69ac1d7Affected cc014ebf803174f0e5d15956dfc5a38413c945ae to before d217d723c5e43881b952cdb978477f7f2dc0b6d7Affected ae388c0e1bf727972096f770f82d12e4f748d1b6 to before f9d492a39ebeb1a56f13ec6dd165a18a48dec812Affected 4a05b2d1b4642df74f30b6f54843e825c4a2bfd3 to before f8a80cfb68613fb7e6452b66447dbc63f435d140Affected
LinuxLinux	6.6.151 to before 6.6.152Affected 6.12.103 to before 6.12.104Affected 6.18.44 to before 6.18.45Affected 7.1.8 to before 7.1.9Affected

Product

Versions

LinuxLinux

49eccef6d6e1c00dac6fb2e7eb6f9206c33e1c37 to before d431941825d357be7d9ab0cb7505e3a1963bd89eAffected
8a7a33b846d6ba695891b8d0040027cdbad8cd52 to before 422d8a02de5ce6a29d616d55e5ead5dec69ac1d7Affected
cc014ebf803174f0e5d15956dfc5a38413c945ae to before d217d723c5e43881b952cdb978477f7f2dc0b6d7Affected
ae388c0e1bf727972096f770f82d12e4f748d1b6 to before f9d492a39ebeb1a56f13ec6dd165a18a48dec812Affected
4a05b2d1b4642df74f30b6f54843e825c4a2bfd3 to before f8a80cfb68613fb7e6452b66447dbc63f435d140Affected

LinuxLinux

6.6.151 to before 6.6.152Affected
6.12.103 to before 6.12.104Affected
6.18.44 to before 6.18.45Affected
7.1.8 to before 7.1.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.