CVE-2023-54022

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks at error path for UMP open The allocation and initialization errors at alloc_midi_urbs() that is called at MIDI 2.0 / UMP device are supposed to be handled at the caller side by invoking free_midi_urbs(). However, free_midi_urbs() loops only for ep->num_urbs entries, and since ep->num_entries wasn't updated yet at the allocation / init error in alloc_midi_urbs(), this entry won't be released. The intention of free_midi_urbs() is to release the whole elements, so change the loop size to NUM_URBS to scan over all elements for fixing the missed releases. Also, the call of free_midi_urbs() is missing at snd_usb_midi_v2_open(). Although it'll be released later at reopen/close or disconnection, it's better to release immediately at the error path.

• https://git.kernel.org/stable/c/b1757fa30ef14f254f4719bf6f7d54a4c8207216
• https://git.kernel.org/stable/c/f819b343aa95d24d5f7d6e06660c7f62591abc5f

Published

Dec 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-54017In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54018In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54019In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-5402 A CWE-269: Improper Privilege Management vulnerability ex…9.8
• CVE-2023-54020In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54021In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54023In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54024In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54025In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54026In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-54027In the Linux kernel, the following vulnerability has been re…
• CVE-2023-54028In the Linux kernel, the following vulnerability has been re…