CVE-2026-74639: Linux Kernel Use-After-Free in Tascam US-144 MKII Capture URBs

The ALSA driver for the Tascam US-144 MKII resubmits each capture URB from its completion handler without anchoring it. Anchoring belongs to a submission, not to the URB, so the resubmitted request is no longer tracked by the driver's anchor.

On teardown the driver kills the anchored URBs and frees its state, but the untracked resubmission is still in flight and completes into freed memory. The CVE carries a CVSS score of 7.8. The fix re-anchors each URB on resubmission.