CVE-2026-98086
Received Received - Intake

Null Pointer Dereference in Linux Kernel ALSA UMP

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch legacy_rmidi before it exists snd_ump_parse_endpoint() sets ump->parsed on every exit, including error, before the caller attaches the legacy rawmidi device. ump_handle_ep_name_msg() then treats parsed as "legacy_rmidi is live" and calls ump_legacy_set_rawmidi_name(), which snprintf()s into ump->legacy_rmidi->name. If a UMP packet arrives in that window (IRQ path from snd_ump_receive), legacy_rmidi is still NULL (KASAN null-ptr-deref in snprintf). Guard the legacy helpers. parsed only means endpoint info was parsed, not that legacy_rmidi exists.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98086
EUVD
EUVD-2026-86916

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a null pointer dereference can occur in the ALSA UMP (Universal MIDI Packet) subsystem. The issue happens when a UMP packet arrives during a specific window where a legacy MIDI device pointer is accessed before it is properly initialized, leading to a crash.

Detection Guidance

This vulnerability affects the Linux kernel's ALSA UMP subsystem and may lead to a null-pointer dereference. Detection requires checking kernel logs for KASAN errors or crashes related to snd_ump_receive or ump_legacy_set_rawmidi_name. Monitor for kernel oops messages or system crashes during UMP packet handling.

Impact Analysis

This vulnerability could cause system crashes or instability if a UMP packet arrives at the wrong time. It primarily affects systems using the Linux kernel with ALSA UMP support, potentially disrupting audio or MIDI functionality.

Mitigation Strategies

Apply the latest Linux kernel security updates from your distribution vendor. If immediate patching is not possible, disable the ALSA UMP module by blacklisting it or restricting access to UMP devices via kernel module parameters. Monitor vendor advisories for kernel updates addressing this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98086. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart