CVE-2026-98066
Received Received - Intake

Double-Free in Linux Kernel ALSA caiaq Driver

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98066
EUVD
EUVD-2026-86719

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a double-free issue in the Linux kernel's ALSA caiaq driver. It occurs when error handling attempts to release resources that have already been freed, leading to a potential system crash or other undefined behavior.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or unexpected behavior in systems using the affected ALSA caiaq driver. It may also lead to denial-of-service conditions or privilege escalation in rare cases.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the double-free issue in the ALSA caiaq driver. Check your distribution's security updates or kernel release notes for the fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98066. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart