Linux Kernel ALSA bcd2000 Driver Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's ALSA bcd2000 driver. This issue arises during the probe phase when the driver fails to register a sound card. The driver incorrectly frees a USB request block (URB) for MIDI output before properly terminating it, leading to a use-after-free condition. This vulnerability can be exploited when the freed memory is accessed again, potentially causing memory corruption or arbitrary code execution.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, allowing for memory corruption or arbitrary code execution.