SECUFOCUSNOW
Home›CVE index›CVE-2026-64029
Review reviewHigh

CVE-2026-64029

Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer refere...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer refere...

Affected product and versions

Product
Linux
Affected versions
>= 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 < 8ba1c4ddbb1c67d34bb440aecb9f5690ed3f64cb, >= 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 < 0cb1ad795570167558530d6194297ac2396a1991, >= 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 < 3aab4a58d23fb22dac5b558bbe5df1a8dad00b4b, >= 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 < ef46b616a4c219185bbf10ebcbacb571583fd0e4, >= 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 < 60a1969fae6209644698fca91c185d153674f631, >= 6.5
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available