In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
The USB MIDI 2.0 endpoint parser has the same descriptor walking pattern as the legacy MIDI parser. It validates bLength against bNumGrpTrmBlock before reading baAssoGrpTrmBlkID[], but not against the remaining bytes in the endpoint-extra scan.
A malformed device can therefore make later baAssoGrpTrmBlkID[] reads consume bytes past the walked descriptor.
Reject zero-length and overlong descriptors while walking endpoint extras.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-24.04dUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gke-7.0Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-7.0Upgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-7.0Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-generic-lpaeUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-laptop-23.10Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-awsUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-7.0Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-kvmUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-oem-26.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-fips-6.8Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-realtime-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-oracle-64k-lts-24.04 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub