CVE-2026-74502
linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmid...
CVE-2026-74502 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2026-74502, released August 16, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.0
IMPORTANT
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0017
6th percentile
In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmidi error snd_ump_attach_legacy_rawmidi() allocates the legacy conversion array ump->out_cvts and, on the snd_rawmidi_new() error path, frees it with kfree() but leaves ump->out_cvts pointing at the freed memory. When the endpoint is later torn down, snd_ump_endpoint_free() frees ump->out_cvts a second time, resulting in a double free. The host snd-usb-audio driver attaches the legacy rawmidi for any USB MIDI 2.0 (UMP) device, so a device that makes snd_rawmidi_new() fail reaches this path on enumeration. Clear ump->out_cvts after freeing it on the error path so it is not freed again during teardown. Discovered by XBOW, triaged by Baul Lee <baul.lee@xbow.com>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.90.1.150700.17.51.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-livepatch-SLE15-SP7_Update_24 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| kernel-uek · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-devel · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-devel · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-doc · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-doc · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-tools · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek-tools · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-206.104.3.3.el9uek | ELSA-2026-500248 | Sep 4, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 | Nov 7, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.105-1 | DEBIAN-CVE-2026-74502 | Aug 16, 2026 |
| linux · Debian 14 | 7.1.8-1 | DEBIAN-CVE-2026-74502 | Aug 16, 2026 |
| linux-6.12 · Debian 12.15 (bookworm) | 6.12.107-1~deb12u1 | DEBIAN-CVE-2026-74502 | Aug 16, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.