CVE-2026-74498 | Linux Kernel up to 7.2-rc5 ALSA data_ep_set_params out-of-bounds write

A vulnerability was found in Linux Kernel up to 6.6.150/6.12.102/6.18.43/7.1.7/7.2-rc5. It has been declared as very critical. Affected by this vulnerability is the function data_ep_set_params of the component ALSA. Such manipulation leads to out-of-bounds write.

This vulnerability is referenced as CVE-2026-74498. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More