In the Linux kernel, the following vulnerability has been resolved:
ALSA: usx2y: us144mkii: fix work UAF on disconnect
tascam_disconnect() cancels capture_work and midi_in_work before usb_kill_anchored_urbs() kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule the work.
A URB that completes in the small window between cancel_work_sync() and usb_kill_anchored_urbs() therefore re-arms the work after its only cancel. Nothing cancels it again before snd_card_free() frees the card-private tascam structure, so the work handler then runs on freed memory.
Kill the anchored URBs before cancelling the work; once the work is cancelled no remaining URB can complete to re-arm it.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 31, 2026 | Jul 25, 2026 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-26.04bUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-realtime-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-oem-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-gke-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-genericUpgrade linux-image-oem-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-26.04aUpgrade linux-image-gke-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-7.0.0-1018-nvidia-64k | Sep 14, 2026 | Sep 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub