CVE-2026-64029

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA sequencer where seq ump process event() accesses client->out rfile.output without proper synchronization during the transition between the first-open and last-close states in seq ump client open() and seq ump client close(). This lack of synchronization can lead to a slab-use-after-free scenario in snd rawmidi kernel write1(). Specifically, the rawmidi file may be released while an event input callback is still executing within snd rawmidi kernel write(), exposing the rawmidi substream runtime to teardown before the write path has secured its own buffer reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.