Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission In capture_urb_complete(), usb_anchor_urb() is called on every completion callback, but the URB is already anchored from the initial submission in tascam_trigger_start(). Each redundant call corrupts the anchor's doubly-linked list and inflates the URB refcount. When usb_kill_anchored_urbs() traverses the list during stream stop / suspend / disconnect, the corrupted list leads to use-after-free. Remove the redundant usb_anchor_urb() from the resubmit path.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-64601 Linux Kernel ALSA us144mkii Redundant usb_anchor_urb Use-After-Free Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64601
Post summary
The post announces CVE-2026-64601 as a use‑after‑free bug in the Linux Kernel ALSA subsystem but offers no PoC, exploit code, patch, or evidence of active exploitation.