The bug manifests when the ALSA ump subsystem parses an endpoint, marks it as parsed, and prematurely attempts to configure a legacy rawmidi device that has not yet been attached. A UMP packet arriving during this window causes a kernel null pointer dereference in snprintf, triggering a kernel oops and a system crash. This results in a denial of service for the affected host.

The vulnerability is present in the Linux kernel ALSA ump component. The CVE data identifies the vendor as Linux and the product as the Linux kernel. Specific affected kernel versions are not listed in the data; however, any kernel revision that uses the ALSA ump subsystem before the patch detailed in the provided references is susceptible.

The CVSS score is not provided, and no EPSS score is available, so the exact severity cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The attack likely requires the presence of the ALSA ump driver and the ability to deliver a crafted UMP packet, which may be achievable from user space via ALSA interfaces, implying a local or potentially elevated privilege attack. Given the lack of remote exploitation evidence, the risk is primarily a local denial‑of‑service.