CVE-2026-93039

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ASOC meson component within the meson card reallocate links() function. The function uses two consecutive krealloc() calls to expand the DAI link and private data arrays. If the first krealloc() succeeds and moves the data to a new block, but the second krealloc() fails, the card->dai link pointer continues to reference the previously freed memory block. When the probe error path subsequently calls meson card clean references(), it dereferences card->dai link and attempts to free it again, leading to a use-after-free and a double free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.