Threats tagged 'ghsa-54q5-26wc-pgp6'

A vulnerability in the Linux kernel's ALSA ump component was resolved. The issue involved accessing a legacy raw MIDI device pointer before it was initialized, leading to a potential null pointer dereference. This occurred because the code treated a parsed flag as indicating the legacy device was live, which was incorrect. The flaw could cause a kernel address sanitizer (KASAN) null pointer dereference when a UMP packet arrived during this window.