CVE-2026-90198

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ALSA core component. The problem occurs when a sound card managed by devres (device resource management) is unbound while a user-space application still holds an open file descriptor. When the user thread closes the file descriptor, it triggers the release card device() callback, which calls the snd card do free() function. This function calls complete(card->release completion), waking up an unbind thread that immediately frees the memory block containing the snd card structure. The user thread then attempts to read the managed variable from the already freed snd card structure, leading to a memory corruption error detected by KASAN (Kernel Address Sanitizer), a dynamic memory error detector for the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.