In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq: dummy: fix UMP event stack overread
The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event.
When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary.
Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 25, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-lts-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-virtual-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-oem-26.04bUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-ibm-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-raspiUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-raspi-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-7.0 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 13, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub