CVE-2025-37891

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.93

Description The Linux kernel contains a buffer overflow in the ALSA subsystem, specifically within the UMP (Unified MIDI Packet) SysEx message conversion process. The do convert to ump() function uses an internal buffer of size 4 to store incoming MIDI bytes, assuming a maximum size of 4 for MIDI1 UMP packet data. However, SysEx messages can be up to 6 bytes long, leading to a buffer overflow when processing these messages. This can potentially corrupt memory. The fix involves increasing the buffer size to 6 to accommodate SysEx messages. This vulnerability was discovered by an AI-powered vulnerability hunter named Argusee and may enable Local Privilege Escalation (LPE).

Recommendations Upgrade to Linux kernel version 6.6.93 or later.