CVE-2026-90220

CVE-2026-90220 is a kernel pointer leak in the Linux kernel's ALSA: seq subsystem. The function bounce_error_event() embeds a failed event into the bounce payload by pointing data.ext.ptr at it. For queued variable-length events, this pointer holds the kernel address of the first extension cell (...