CVE-2026-53242

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA PCM component where the snd pcm drain() function causes wait queue list corruption on linked streams. The function uses init waitqueue entry, which fails to clear entry.prev and entry.next, combined with add wait queue and a conditional remove wait queue. When a concurrent UNLINK occurs, the remove wait queue step is skipped, leaving an orphaned wait entry on the unlinked substream sleep queue. During the next drain iteration, add wait queue adds this entry to a new queue while it remains linked to the old one, corrupting both lists. This leads to a kernel panic when a subsequent wake up dereferences a NULL function pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.