CVE-2026-74504

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A division by zero issue exists in the ALSA sequencer. An unprivileged user with access to /dev/snd/timer and /dev/snd/seq can set the hardware resolution of a userspace-driven ALSA timer (SND UTIMER) to an arbitrary 64-bit value using SNDRV TIMER IOCTL CREATE. When this timer is bound to a sequencer queue, the initialize timer() function calculates the tick period using a formula where a resolution of 2^63 can cause the product of the resolution and the sequencer update rate to wrap to zero for any even frequency. This results in a division by zero fault. Because this operation occurs while holding tmr->lock with interrupts disabled, the resulting system failure leaves the spinlock held, leading to a CPU hang.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.