SB20260816208 - Use-after-free in Linux kernel usb

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816208

SB20260816208 - Use-after-free in Linux kernel usb

Published: August 16, 2026

Security Bulletin ID SB20260816208
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Physical access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-74501)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an attacker with physical access to disclose sensitive information.

The vulnerability exists due to use-after-free in ump_to_endpoint() when handling a subsequent open of the exposed UMP device node after a malicious USB MIDI 2.0 device causes creation to fail. An attacker with physical access can connect a malicious USB MIDI 2.0 device to trigger the dangling pointer dereference and disclose sensitive information.

The issue occurs because the UMP endpoint remains registered and its device node stays exposed after the associated snd_usb_midi2_ump object has been freed.


Remediation

Install update from vendor's website.

References