CVE-2026-53241

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) sequencer dummy port. This vulnerability arises from a stack overread when processing Universal MIDI Packet (UMP) events, where the system attempts to copy a UMP-sized packet into a smaller, legacy-sized stack storage. This could allow a local attacker to cause a denial of service or potentially disclose sensitive information.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with low privileges and is primarily limited to causing a denial of service through a kernel crash rather than arbitrary code execution. Under typical enterprise server installations, audio sequencer drivers and Universal MIDI Packet routing are rarely exposed or used by unprivileged users. Additionally, earlier enterprise releases are unaffected as they lack the newer sound subsystem code introduced upstream.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.