CVE-2026-64601: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
In the Linux kernel, the following vulnerability has been resolved:
ALSA: us144mkii: captureurbcomplete: redundant usbanchorurb corrupts anchor list on each resubmission
In captureurbcomplete(), usbanchorurb() is called on every completion callback, but the URB is already anchored from the initial submission in tascamtriggerstart(). Each redundant call corrupts the anchor's doubly-linked list and inflates the URB refcount. When usbkillanchoredurbs() traverses the list during stream stop / suspend / disconnect, the corrupted list leads to use-after-free.
Remove the redundant usbanchorurb() from the resubmit path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64601?
CVE-2026-64601 has a risk rating of 44.
How do I fix CVE-2026-64601?
To resolve CVE-2026-64601, ensure you update to the latest version of the Linux kernel where this vulnerability is addressed.
What systems are affected by CVE-2026-64601?
CVE-2026-64601 affects the Linux kernel specifically related to the ALSA us144mkii driver.
What type of vulnerability is CVE-2026-64601?
CVE-2026-64601 is classified as a Use After Free vulnerability.
When was CVE-2026-64601 published?
CVE-2026-64601 was published on August 6, 2026.