CVE-2026-98266: ALSA: core: Fix potential UAF after asynchronous card release

Published Oct 6, 2026

Updated

ALSA: core: Fix potential UAF after asynchronous card release

Affected Software

1 affected component

Linux Linux kernel

Event History

Oct 6, 2026

CVE Published

via MITRE·08:45 AM

Data Sourced

via MITRE·08:45 AM

Description

Data Sourced

via NVD·09:18 AM

Description

Oct 7, 2026

Data Sourced

via Microsoft·08:43 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which systems are most likely to be exposed?

Systems using ALSA sound drivers that release cards asynchronously via snd_card_free_when_closed() are the relevant exposure case. The description specifically identifies the USB-audio driver as an example.

What condition is required for the use-after-free to occur?

A card must be disconnected and released asynchronously while in-flight tasks still access the underlying card->dev device. Although snd_card_disconnect() blocks newer accesses, it does not stop those already in progress.

How can I determine whether a kernel includes the fix?

Check whether the kernel contains the ALSA core change that takes a reference to card->dev when the card object is initialized and releases that reference in the card destructor. The provided stable references identify commits containing the fix.

CVE-2026-98266: ALSA: core: Fix potential UAF after asynchronous card release

Affected Software

Event History

Frequently Asked Questions

Which systems are most likely to be exposed?

What condition is required for the use-after-free to occur?

How can I determine whether a kernel includes the fix?

Company

Resources

Contact

Frequently Asked Questions

Which systems are most likely to be exposed?

What condition is required for the use-after-free to occur?

How can I determine whether a kernel includes the fix?