Threats tagged 'ghsa-hxc5-rp8m-w6cf'

A use-after-free vulnerability in the Linux kernel's ALSA caiaq USB sound driver was resolved by decoupling the ep1_in_urb and midi_out_urb objects from the main device structure and managing their memory separately. This prevents the premature freeing of these URB objects when the sound card is released after a command timeout, which previously could lead to a kernel slab-use-after-free error.