CVE-2026-72443

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the ALSA USB audio component. During the execution of snd usb midi v2 create(), MIDI 2.0 input URBs (USB Request Blocks) are started. If a subsequent setup failure occurs, the system may call snd usb midi v2 free(), which frees endpoints and coherent URB buffers without first stopping the submitted URBs. This allows a completion handler in input urb complete() to dereference the freed URB context and endpoint state or attempt to resubmit from a stale endpoint. This behavior was identified as a KASAN slab-use-after-free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.