CVE-2026-53193

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ALSA timer component. When a snd timer object is freed using the snd timer free() function while snd timer instance objects are still assigned, the system unlinks the instances and releases resources. However, slave timer instances associated with a master instance may still point to the freed timer object, leading to a use-after-free condition. This is particularly triggerable when userspace-driven timers (CONFIG SND UTIMER) are used, as they can create and delete timer objects through file open and close operations while other applications continue to access the timer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.