CVE-2026-90060

CVE-2026-90060 affects the ALSA control subsystem in the Linux kernel . The kcontrol LED state layer naively assumes all associated kcontrol elements are readable, but a write-only element with no get callback (which can even be created by a user element) can trigger a NULL pointer dereference in...