PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-64491

CVE-2026-64491

kernel: ALSA: usx2y: us144mkii: fix work UAF on disconnect

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · July 25, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) usx2y us144mkii driver. This vulnerability, a Use-After-Free (UAF), occurs when a USB device is disconnected, leading to a race condition where the system attempts to access memory that has already been released. This could allow a local attacker to cause system instability, crash the system, or potentially execute malicious code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference