The Linux kernel ALSA us144mkii driver contained a vulnerability where the capture_urb_complete() function called usb_anchor_urb() on every completion callback, despite the URB already being anchored during initial submission in tascam_trigger_start(). This redundant anchoring corrupts the doubly-linked list used to track URBs and inflates the URB reference count. When usb_kill_anchored_urbs() later traverses this corrupted list during stream stop, suspend, or disconnect, it results in a use-after-free condition. The vulnerability was resolved by removing the redundant usb_anchor_urb() call from the resubmission path.

The corrupted anchor list and inflated URB reference count can lead to use-after-free conditions in the kernel during audio stream stop, suspend, or disconnect operations. This could potentially cause kernel crashes or undefined behavior, impacting system stability and security.

A fix has been applied to the Linux kernel to remove the redundant usb_anchor_urb() call in the resubmit path of the ALSA us144mkii driver. Users should update to the fixed kernel version once available. Patch status is not yet confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for current remediation guidance.