CVE-2026-74261

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA sequencer where stale FIFO cells can be relinked during a pool resize operation. This occurs because snd seq fifo event in() duplicates events before acquiring f->lock, and snd seq read() may call snd seq fifo cell putback() if copy to user() or snd seq expand var event() fails. If a resize operation swaps f->pool and detaches the old head in between these actions, a stale cell from the old pool can be relinked. This prevents the old pool counter from reaching zero, causing snd seq pool delete() to wait indefinitely for the retired pool to drain, which can lead to a blocked ioctl call in the pool teardown path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.