CVE-2026-89890

CVE-2026-89890 is a use-after-free in the Linux kernel's go7007 media driver. In go7007_snd_remove(), the v4l2_device reference is dropped immediately after snd_card_free_when_closed(), which is too early when a userspace process still has the capture PCM open. The ALSA card's PCM callbacks remai...