CVE-2026-74501: ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
ALSA: usb-audio: fix use-after-free in umptoendpoint()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1 - Configuration
In the ALSA usb-audio code path, clear the created endpoint’s back-pointer to the per-interface snd_usb_midi2_ump object before freeing the snd_usb_midi2_ump, and ensure the callbacks/error paths fail cleanly without leaving a dangling pointer (so ump_to_endpoint() does not dereference freed memory).
Linux kernel ALSA usb-audio (function ump_to_endpoint / snd_usb_midi_v2_create) Fix use-after-free by clearing endpoint back-pointer before freeing the snd_usb_midi2_ump object = Apply the resolution that clears the per-interface back-pointer and prevents stale dereference on open/close/trigger paths
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74501?
CVE-2026-74501 has a risk severity rating of 33.
What type of vulnerability is CVE-2026-74501?
CVE-2026-74501 is classified as a Use After Free vulnerability.
How do I fix CVE-2026-74501?
To fix CVE-2026-74501, you should update the Linux kernel to the latest version where this vulnerability has been patched.
What impact does CVE-2026-74501 have on systems?
CVE-2026-74501 can potentially lead to application crashes or arbitrary code execution due to the use-after-free condition.
What software is affected by CVE-2026-74501?
CVE-2026-74501 affects the ALSA subsystem of the Linux kernel, particularly the usb-audio component.