CVE-2026-80872

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ALSA tas2781 driver. The TAS2781 HDA I2C and SPI queue RCA firmware loading during component bind using the request firmware nowait() function. While the firmware loader maintains a device reference and keeps the callback module pinned, the callback continues to use driver-private HDA state. During component unbind, controls and DSP state are removed immediately, and subsequent device removal destroys the TAS2781 private data, including the codec lock variable. If the asynchronous firmware callback executes after the unbind process has started, it may operate on state that is currently being torn down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.