ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
CVE-2025-37891 is fixed in 64 products on 1 platform, first by DEBIAN-CVE-2025-37891, released May 19, 2025. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is 4, as it was supposed to be the max size for a MIDI1 UMP packet data. However, the implementation overlooked that SysEx is handled in a different format, and it can be up to 6 bytes, as found in do_convert_to_ump(). It leads eventually to a buffer overflow, and may corrupt the memory when a longer SysEx message is received. The fix is simply to extend the buffer size to 6 to fit with the SysEx UMP message.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel · RHEL 10 | 6.12.0-55.55.1.el10_0 | RHSA-2026:1236 | Dec 6, 2025 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-azure · sles 15.7 | 6.4.0-150700.20.6.1 | SUSE-SU-2025:02254-1 | Jul 8, 2025 |
| kernel-coco · sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 | Aug 20, 2025 |
| kernel-coco_debug · sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 | Aug 20, 2025 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.6.1.150700.17.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-livepatch-SLE15-SP6-RT_Update_11 · sles 15.6 | 1-150600.1.3.2 | SUSE-SU-2025:01964-1 | Jun 16, 2025 |
| kernel-livepatch-SLE15-SP6_Update_12 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-livepatch-SLE15-SP7-RT_Update_2 · sles 15.7 | 1-150700.1.5.1 | SUSE-SU-2025:02333-1 | Jul 16, 2025 |
| kernel-livepatch-SLE15-SP7_Update_2 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 | Jun 16, 2025 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 | Jun 16, 2025 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-source-azure · sles 15.7 | 6.4.0-150700.20.6.1 | SUSE-SU-2025:02254-1 | Jul 8, 2025 |
| kernel-source-coco · sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 | Aug 20, 2025 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 | Jun 16, 2025 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 | Jun 16, 2025 |
| kernel-syms-azure · sles 15.7 | 6.4.0-150700.20.6.1 | SUSE-SU-2025:02254-1 | Jul 8, 2025 |
| kernel-syms-coco · sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 | Aug 20, 2025 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 | Jun 16, 2025 |
| kernel-uek · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 | Jun 18, 2025 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 | Jul 14, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.29-1 | DEBIAN-CVE-2025-37891 | May 19, 2025 |
| linux · Debian 14 | 6.12.29-1 | DEBIAN-CVE-2025-37891 | May 19, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.