CVE-2026-74278

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel heap address leak exists in the bounce error event() function. The implementation unconditionally uses SNDRV SEQ EVENT KERNEL ERROR for all clients, setting data.quote.event to a raw struct snd seq event pointer. When a bounce error event is delivered to a USER CLIENT via the snd seq read() function, the kernel heap address is exposed to userspace through copy to user() in the fixed-length branch, where no sanitization occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.