Live › vulnerability › CVE-2026-98742
Go to dashboardConcurrent 32-bit compatibility port-info ioctl calls to the ALSA sequencer skip the client mutex, so port indexes can wrap onto existing ones. Later subscriber teardown then reaches a freed subscriber, which can corrupt kernel memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with ALSA sequencer support, where a local process can issue 32-bit compat ioctls against /dev/snd/seq. Hosts without the sequencer loaded, or machines that run only 64-bit userspace without compat callers, are less exposed. Sources do not name specific distributions or kernel versions.
No product ranges from the sources yet.
uname -r to see the running kernel version, then compare it against the fixed kernel in the NVD entrylsmod | grep snd_seq; if it is absent, the flaw is not reachableEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq: Serialize compat port-info ioctls
The native sequencer ioctl path serializes handler calls with client->ioctl_mutex, but the translated port-info compat path invokes the same handlers through snd_seq_kernel_client_ctl() without taking that mutex.
This lets concurrent compat CREATE_PORT requests pass the port-count check before any request reaches the serialized insertion. The computed integer port index can then exceed the address field range and wrap to an existing index. Subsequent subscriber teardown can resolve the duplicate address to the wrong port and access a freed subscriber.
Take ioctl_mutex while dispatching converted port-info requests, matching the native ioctl path. All translated port-info commands share this helper, so their accesses to the client port state are serialized as well.
This page as .md · .json · in your agent: get_signal("CVE-2026-98742")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.