Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_disconnect() cancels… (CVE-2026-64491)
A use-after-free (UAF) vulnerability in the Linux kernel ALSA usx2y us144mkii driver was resolved. The issue occurs because USB Request Blocks (URBs) can re-arm work after it has been cancelled but before the URBs are killed, leading to a work handler running on freed memory. This can cause memory corruption. The fix involves killing anchored URBs before cancelling the work to prevent re-arming after cancellation.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel ALSA usx2y us144mkii driver involves a race condition where USB Request Blocks (URBs) self-resubmit and their completion handlers reschedule work after cancel_work_sync() has been called but before usb_kill_anchored_urbs() kills the URBs. This timing window allows the work to be re-armed after cancellation, resulting in the work handler executing on freed memory (use-after-free). The patch corrects this by killing the anchored URBs before cancelling the work, ensuring no URB can complete and re-arm the work after cancellation.
Potential Impact
This use-after-free vulnerability can lead to memory corruption within the kernel, potentially causing system instability or crashes. There is no information about known exploits in the wild. The impact is limited to the affected ALSA driver component in the Linux kernel.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by changing the order of operations to kill anchored URBs before cancelling work. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; check the vendor or distribution advisory for the exact fixed versions and update instructions.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_disconnect() cancels… (CVE-2026-64491)
Description
A use-after-free (UAF) vulnerability in the Linux kernel ALSA usx2y us144mkii driver was resolved. The issue occurs because USB Request Blocks (URBs) can re-arm work after it has been cancelled but before the URBs are killed, leading to a work handler running on freed memory. This can cause memory corruption. The fix involves killing anchored URBs before cancelling the work to prevent re-arming after cancellation.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel ALSA usx2y us144mkii driver involves a race condition where USB Request Blocks (URBs) self-resubmit and their completion handlers reschedule work after cancel_work_sync() has been called but before usb_kill_anchored_urbs() kills the URBs. This timing window allows the work to be re-armed after cancellation, resulting in the work handler executing on freed memory (use-after-free). The patch corrects this by killing the anchored URBs before cancelling the work, ensuring no URB can complete and re-arm the work after cancellation.
Potential Impact
This use-after-free vulnerability can lead to memory corruption within the kernel, potentially causing system instability or crashes. There is no information about known exploits in the wild. The impact is limited to the affected ALSA driver component in the Linux kernel.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by changing the order of operations to kill anchored URBs before cancelling work. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; check the vendor or distribution advisory for the exact fixed versions and update instructions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-97r3-fw5v-8xg8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64491"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542079c2644c7f80826e8
Added to database: 07/25/2026, 23:08:55 UTC
Last enriched: 08/15/2026, 02:21:41 UTC
Last updated: 09/07/2026, 10:52:10 UTC
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.