CVE-2026-53241

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA dummy sequencer port where events are forwarded by copying an incoming struct snd seq event into a stack temporary. Because the legacy event storage is smaller than struct snd seq ump event, a UMP event reaching the dummy client results in the UMP flag being set while only providing legacy-sized storage. The subscriber delivery path then utilizes snd seq event packet size() and copies a UMP-sized packet from the stack object, leading to a read operation past the end of the temporary storage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.