CVE-2026-58091

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A use-after-free issue exists in the implementation of an ioctl, which occurs when the system attempts to acquire locks on all channels in a sync group. If locking a channel blocks, the system releases the sync group list lock and sleeps; however, it fails to handle cases where the sync group structure is freed before the system reawakens. On systems with multiple audio devices, an unprivileged local user can exploit this to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.