CVE-2026-46090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the ALSA loopback driver. The loopback check format() function may stop the capture side when playback starts with parameters that do not match a running capture stream. While peer lookup is performed under cable->lock, the snd pcm stop() function executes after the lock is released. A concurrent close operation can remove the capture entry from cable->streams[] and free its runtime while the playback trigger path still holds a stale peer substream pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.