CVE-2026-68201

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ALSA timer component. The function snd timer close locked() drains the closing instance's own in-flight callback (IFLG CALLBACK) but fails to drain those of its slaves. When a master instance is closed, remove slave links() clears the ->timer of each slave. Consequently, the slave's own close process skips the drain because the timer is NULL, and snd timer stop slave() also performs no operation. This allows a slave with a running callback to be freed while the callback is still active.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.