CVE-2025-37891

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Universal MIDI Packet (UMP) driver. This vulnerability allows a buffer overflow and potential memory corruption via a malformed Universal MIDI Packet (UMP) System Exclusive (SysEx) message during MIDI 1.0 to UMP conversion.

MODERATE: A vulnerability in the Linux kernel's ALSA Universal MIDI Packet (UMP) driver could lead to a memory corruption due to a buffer overflow problem. This vulnerability occurs during MIDI to UMP conversion when processing a malformed UMP System Exclusive (SysEx) message. In this flaw a local attacker with normal user privilege may cause a random memory corruption which may lead to a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.