PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-90207

CVE-2026-90207

kernel: ALSA: seq: midi: Serialize input teardown with event_input

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · November 4, 2026

Description

A flaw was found in the Advanced Linux Sound Architecture (ALSA) MIDI sequencer component of the Linux kernel. A race condition can occur during the teardown of a rawmidi substream while input events are being processed. This can lead to a null pointer dereference, allowing a local attacker to cause a denial of service by crashing the kernel.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-476 · NULL Pointer Dereference