CVE-2026-89736

CVE-2026-89736 is a use-after-free (UAF) vulnerability in the Linux kernel's USB gadget u_audio driver. When a sound card is disconnected, g_audio_cleanup() calls snd_card_free_when_closed()—which returns asynchronously—yet immediately frees the struct snd_uac_chip context. If userspace applicati...