CVE-2026-89895

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the cobalt media component. The function snd cobalt card create() assigns a pointer to sc->private data and sets snd cobalt card private free() as the cleanup handler. If cobalt alsa init() fails, the error handling path invokes snd card free(sc), which releases the data, and subsequently calls kfree(cobsc), resulting in the same memory object being freed twice.

Recommendations Remove the explicit kfree(cobsc) call to ensure memory ownership remains with the ALSA card. At the moment, there is no information about a newer version that contains a fix for this vulnerability.