EUVD-2026-80491

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of devnext-devlist on disconnect When a device with hasdualts=1 is probed and the isaudioonly path is taken, both dev and dev-devnext are added to the global em28xxdevlist via em28xxinitextension...

CVE-2026-89891

CVE-2026-89891 is a use-after-free vulnerability in the Linux kernel's em28xx media driver. When a device with has_dual_ts=1 takes the is_audio_only probe path, both dev and dev->dev_next are added to the global em28xx_devlist. On disconnect, em28xx_close_extension() only unlinks dev->devli...