CVE-2026-74387

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA MIDI sequence component where the event process midi() function borrows msynth->output rfile.output and passes the substream to dump midi() and snd rawmidi kernel write() without proper synchronization during output open and close transitions. Additionally, midisynth use() publishes output rfile before snd rawmidi output params() completes. This lack of synchronization allows midisynth unuse() to release the rawmidi file and free substream->runtime while snd rawmidi kernel write1() is attempting to take a runtime buffer reference. Consequently, the event input path may use a stale substream or runtime, potentially leading to a NULL-dereference or use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.