{"id":"CVE-2026-98742","aliases":[],"cve":{"records":[{"id":"CVE-2026-98742","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-25T10:25:14.367Z","published":"2026-10-18T15:47:27.137Z","modified":"2026-10-30T12:39:16.216Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:39:16.216Z"}],"references":[{"url":"https://git.kernel.org/stable/c/14e178c60ba1cea49186fcfccac93d66aa94e9e0","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/4980768c5d092493be0deb20d1ee86aa661466f8","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/2c0cce3a5a660270d65729b0f318d4e01470479d","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/2db234e163f0d211b69a4eebbec8aacc5a54a80e","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/413211dd31cb2ef2fc99fb0aa1a037a97509502c","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/fc5c52848e405b6efb073db5035bb9ebaed11ec4","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/702d92f361f65d9698c473c7599d471395dc4341","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/95b2e0361c88753afa030c10698be0a1a5b67650","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"5.10.273"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"5.15.224"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.6.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.12.113"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.18.56"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"7.2.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"7.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.16.54"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.18.94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.115"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9.78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.14.15"}]}]}]}],"prioritization":[]},"title":"ALSA: seq: Serialize compat port-info ioctls","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: Serialize compat port-info ioctls\n\nThe native sequencer ioctl path serializes handler calls with\nclient->ioctl_mutex, but the translated port-info compat path invokes the\nsame handlers through snd_seq_kernel_client_ctl() without taking that\nmutex.\n\nThis lets concurrent compat CREATE_PORT requests pass the port-count\ncheck before any request reaches the serialized insertion. The computed\ninteger port index can then exceed the address field range and wrap to an\nexisting index. Subsequent subscriber teardown can resolve the duplicate\naddress to the wrong port and access a freed subscriber.\n\nTake ioctl_mutex while dispatching converted port-info requests, matching\nthe native ioctl path. All translated port-info commands share this\nhelper, so their accesses to the client port state are serialized as\nwell.","score":null,"severity":"unknown","published":"2026-10-18T15:47:27.137Z","modified":"2026-10-30T12:39:16.216Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"14e178c60ba1cea49186fcfccac93d66aa94e9e0","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"4980768c5d092493be0deb20d1ee86aa661466f8","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"2c0cce3a5a660270d65729b0f318d4e01470479d","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"2db234e163f0d211b69a4eebbec8aacc5a54a80e","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"413211dd31cb2ef2fc99fb0aa1a037a97509502c","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"fc5c52848e405b6efb073db5035bb9ebaed11ec4","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"702d92f361f65d9698c473c7599d471395dc4341","versionType":"git"},{"version":"b3defb791b26ea0683a93a4f49c77ec45ec96f10","status":"affected","lessThan":"95b2e0361c88753afa030c10698be0a1a5b67650","versionType":"git"},{"version":"d6693160906d55ba376bf0b88b7c129762170162","status":"affected","versionType":"git"},{"version":"02cbce8576a31df8fca54aaec91ee081076bd79d","status":"affected","versionType":"git"},{"version":"6aab3aa52366a0051e5abf8aae4616c42053fd8e","status":"affected","versionType":"git"},{"version":"f8a38ab4cd9624fc5ac8a7f965c7b20f5b62c03c","status":"affected","versionType":"git"},{"version":"623e5c8ae32b39cc8baea83478695dc624935318","status":"affected","versionType":"git"},{"version":"e4ff9f294629b65df3f7982cd4faf86b2856b9d7","status":"affected","versionType":"git"},{"version":"c3162384aed4cfe3f1a1f40041f3ba8cd7704d88","status":"affected","versionType":"git"},{"version":"3.2.99","status":"affected","lessThan":"3.3","versionType":"semver"},{"version":"3.16.54","status":"affected","lessThan":"3.17","versionType":"semver"},{"version":"3.18.94","status":"affected","lessThan":"3.19","versionType":"semver"},{"version":"4.1.50","status":"affected","lessThan":"4.2","versionType":"semver"},{"version":"4.4.115","status":"affected","lessThan":"4.5","versionType":"semver"},{"version":"4.9.78","status":"affected","lessThan":"4.10","versionType":"semver"},{"version":"4.14.15","status":"affected","lessThan":"4.15","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98742"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"4.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.15","versionType":"semver"},{"version":"5.10.273","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.224","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.160","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.113","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.56","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.10","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98742"}],"remediation":[],"references":["https://git.kernel.org/stable/c/14e178c60ba1cea49186fcfccac93d66aa94e9e0","https://git.kernel.org/stable/c/4980768c5d092493be0deb20d1ee86aa661466f8","https://git.kernel.org/stable/c/2c0cce3a5a660270d65729b0f318d4e01470479d","https://git.kernel.org/stable/c/2db234e163f0d211b69a4eebbec8aacc5a54a80e","https://git.kernel.org/stable/c/413211dd31cb2ef2fc99fb0aa1a037a97509502c","https://git.kernel.org/stable/c/fc5c52848e405b6efb073db5035bb9ebaed11ec4","https://git.kernel.org/stable/c/702d92f361f65d9698c473c7599d471395dc4341","https://git.kernel.org/stable/c/95b2e0361c88753afa030c10698be0a1a5b67650"],"sources":[{"name":"CVE","id":"CVE-2026-98742","modified":"2026-10-30T12:39:16.216Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-98742"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T14:04:44.368Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:20:35.853Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}