CVE Explorer

CVE-2026-64479

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() snd_seq_event_dup() copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell->ump.raw.extra word that the memcpy() did not cover. The guard deciding whether to clear it compares the copied size against sizeof(cell->event): memcpy(&cell->ump, event, size); if (size < sizeof(cell->event)) cell->ump.raw.extra = 0; For a l

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f9730c48bc51c31066563f2cf7afd630438fd1736895d1db001aa974bd01de1f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/core/seq/seq_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d7649aa11089a93ea2285c210397aa67e5800766","status":"affected","version":"6389f2c135311c4ce7c08c3b29145c8f95aacf1f","versionType":"git"},{"lessThan":"a224c84e5d3d35708c082c84ad12d81d90762195","status":"affected","version":"d7e2ce72833bb23a82b4201fbed7214cc04a4a8c","versionType":"git"},{"lessThan":"ea672a9f6cc38f06fe69dd2c257ef8a3d4db179a","status":"affected","version":"46397622a3fa8372b8…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/core/seq/seq_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.5"},{"lessThan":"6.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessT…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/affected/1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/435990e25bf1f4af3e6df12a6fbfd1f7ba4a97d4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/651ba82fe2a144bc7356d940bfd235c3810b0549"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/6ded42615fa1f4949925afd0a8a9e1ab3bf96202"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/a224c84e5d3d35708c082c84ad12d81d90762195"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/d7649aa11089a93ea2285c210397aa67e5800766"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/ea672a9f6cc38f06fe69dd2c257ef8a3d4db179a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/fb1aa5082847b98f44f9c6272aee9d0dca9244f0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2c57f65db835e9ce6428f33044d5c41404e68d036f7e47b0889dcd50a8e2b8c3 · sha256:4140932e2a9bc39a… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer