CVE-2026-98742

ALSA: seq: Serialize compat port-info ioctls

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: seq: Serialize compat port-info ioctls

The native sequencer ioctl path serializes handler calls with client->ioctl_mutex, but the translated port-info compat path invokes the same handlers through snd_seq_kernel_client_ctl() without taking that mutex.

This lets concurrent compat CREATE_PORT requests pass the port-count check before any request reaches the serialized insertion. The computed integer port index can then exceed the address field range and wrap to an existing index. Subsequent subscriber teardown can resolve the duplicate address to the wrong port and access a freed subscriber.

Take ioctl_mutex while dispatching converted port-info requests, matching the native ioctl path. All translated port-info commands share this helper, so their accesses to the client port state are serialized as well.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 14e178c60ba1cea49186fcfccac93d66aa94e9e0Affected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 4980768c5d092493be0deb20d1ee86aa661466f8Affected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 2c0cce3a5a660270d65729b0f318d4e01470479dAffected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 2db234e163f0d211b69a4eebbec8aacc5a54a80eAffected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 413211dd31cb2ef2fc99fb0aa1a037a97509502cAffected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before fc5c52848e405b6efb073db5035bb9ebaed11ec4Affected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 702d92f361f65d9698c473c7599d471395dc4341Affected b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 95b2e0361c88753afa030c10698be0a1a5b67650Affected d6693160906d55ba376bf0b88b7c129762170162Affected 02cbce8576a31df8fca54aaec91ee081076bd79dAffected 6aab3aa52366a0051e5abf8aae4616c42053fd8eAffected f8a38ab4cd9624fc5ac8a7f965c7b20f5b62c03cAffected 623e5c8ae32b39cc8baea83478695dc624935318Affected e4ff9f294629b65df3f7982cd4faf86b2856b9d7Affected c3162384aed4cfe3f1a1f40041f3ba8cd7704d88Affected 3.2.99 to before 3.3Affected 3.16.54 to before 3.17Affected 3.18.94 to before 3.19Affected 4.1.50 to before 4.2Affected 4.4.115 to before 4.5Affected 4.9.78 to before 4.10Affected 4.14.15 to before 4.15Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 14e178c60ba1cea49186fcfccac93d66aa94e9e0Affected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 4980768c5d092493be0deb20d1ee86aa661466f8Affected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 2c0cce3a5a660270d65729b0f318d4e01470479dAffected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 2db234e163f0d211b69a4eebbec8aacc5a54a80eAffected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 413211dd31cb2ef2fc99fb0aa1a037a97509502cAffected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before fc5c52848e405b6efb073db5035bb9ebaed11ec4Affected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 702d92f361f65d9698c473c7599d471395dc4341Affected
b3defb791b26ea0683a93a4f49c77ec45ec96f10 to before 95b2e0361c88753afa030c10698be0a1a5b67650Affected
d6693160906d55ba376bf0b88b7c129762170162Affected
02cbce8576a31df8fca54aaec91ee081076bd79dAffected
6aab3aa52366a0051e5abf8aae4616c42053fd8eAffected
f8a38ab4cd9624fc5ac8a7f965c7b20f5b62c03cAffected
623e5c8ae32b39cc8baea83478695dc624935318Affected
e4ff9f294629b65df3f7982cd4faf86b2856b9d7Affected
c3162384aed4cfe3f1a1f40041f3ba8cd7704d88Affected
3.2.99 to before 3.3Affected
3.16.54 to before 3.17Affected
3.18.94 to before 3.19Affected
4.1.50 to before 4.2Affected
4.4.115 to before 4.5Affected
4.9.78 to before 4.10Affected
4.14.15 to before 4.15Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.