CVE-2023-54022

kernel: Linux kernel ALSA USB audio: Denial of Service due to memory leaks in MIDI 2.0 / UMP device handling

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 24, 2025

Updated · June 30, 2026

Description

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) USB audio driver. This vulnerability, related to improper memory management when handling MIDI 2.0 / Universal MIDI Packet (UMP) devices, could lead to memory leaks. A local attacker with low privileges could exploit this flaw by triggering specific allocation and initialization errors. This could result in a Denial of Service (DoS) due to resource exhaustion.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime