CVE-2026-90032

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usbtv media component where an open PCM file can remain active after a USB disconnect. This occurs because usbtv audio free() utilizes snd card free when closed(), allowing the disconnect process to drop the V4L2 device reference and free the usbtv structure before ALSA releases the substream. Consequently, a subsequent close operation leads to a use-after-free condition in the snd usbtv pcm close() function, where freed memory is dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.