CVE-2026-80716

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA (Advanced Linux Sound Architecture) component where snd pcm drain() on a linked stream places a wait entry on the stack of the drained peer's runtime->sleep. If group membership changes during the wait and the sleep terminates due to a signal or timeout, the finish wait() function is skipped. This leaves the entry queued on the stream's sleep list, causing a subsequent wake up() call to access a freed stack frame. This condition can be triggered by unlinking either the drained or the draining stream. The problem occurs because snd pcm unlink() does not wake sleep queues, unlike the close path handled by snd pcm drop() and snd pcm post stop().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.