CVE-2026-98066

ALSA: caiaq: Fix potential double-free at error path

N/A
Published: September 25, 2026 at 10:24 AM UTC
Updated: October 19, 2026 at 10:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

09616e25f502080ba684fc7fcf959d1376ab756d096dd8519cf2f768e9e14f224b627f7aaee1a9c528abd224db4a49560b452115bca3672a20e45b2f5.10.2585.15.2096.1.1756.12.866.18.276.6.1406251e3e256337a30160ef59ab1580dde4d1acd287.0.47.19616e25f502080ba684fc7fcf959d1376ab756d96dd8519cf2f768e9e14f224b627f7aaee1a9c5b956e48371f2ff72b76be9a829800ecec963bd45da938aa9fc7826901921dcea225948ab21a97e45e59ecd4ee3a450db6cb4e4ecaa3efdd593f80056f537e3ad69609f6924a4db6b4a7f6561f5288bdd
Vendor states this is fixed in 1dd715ca0568e4833ed5878f49b028b449941096 (fixed)
Vendor states this is fixed in 2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8 (fixed)
Vendor states this is fixed in 3b26ceef88c110f4d188387cffa0df78657be904 (fixed)
Vendor states this is fixed in 75b20534d7a37e091db585f8b505a3b77b7e81a8 (fixed)
Vendor states this is fixed in b629ae7b3eddc6812d5af3614b8c1bd76d65fa75 (fixed)
Vendor states this is fixed in b6cd6f1664a0bc8038b9baa7e6f5fe8e4142d056 (fixed)
Vendor states this is fixed in da93fd9002d980bb02b729c5d5aeefeb252dd110 (fixed)
Vendor states this is fixed in ddfff1cec52b7deec6c770ba85de4dab6221d0a2 (fixed)
Vendor states this is fixed in 5.10.271 (unaffected)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusUNDERGOING ANALYSIS

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card