Ubuntu Security Notice 2928-2 - Andrey Konovalov discovered that the ALSA USB MIDI driver incorrectly performed a double-free. A local attacker with physical access could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges.
0548ba874506e42d15a13b5b301f1959e1ec7b5fd2d22c19353fda781c5a77b3