CVE-2026-89736

CVE-2026-89736 is a use-after-free (UAF) in the Linux kernel's USB audio gadget driver (u_audio). During sound card disconnection, g_audio_cleanup() frees the struct snd_uac_chip context immediately after snd_card_free_when_closed() returns, but ALSA control elements (kctls) may still be open in ...

CVE-2026-89736: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: Fix use-after-free on sound card disconnect gaudiocleanup invokes sndcardfreewhenclosed to initiate sound card teardown and immediately frees the underlying struct snduacchip context. However,...