CVE-2026-98066

Awaiting Analysis Awaiting Analysis - Queue

Double-Free in Linux Kernel ALSA caiaq Driver

Publication date: 2026-09-25

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98066

EUVD

EUVD-2026-86719

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a double-free issue in the Linux kernel's ALSA caiaq driver. It occurs when error handling attempts to release resources that have already been freed, leading to a potential system crash or other undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's ALSA caiaq driver and involves a potential double-free error in resource management. Detection requires checking kernel logs for related errors or crashes involving the caiaq driver. Commands like dmesg | grep caiaq or journalctl -k | grep caiaq may help identify issues. Ensure your kernel is updated to a patched version.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or unexpected behavior in systems using the affected ALSA caiaq driver. It may also lead to denial-of-service conditions or privilege escalation in rare cases.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel memory management issue unrelated to data protection or privacy controls.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the double-free issue in the ALSA caiaq driver. Check your distribution's security updates or kernel release notes for the fix.

Hi! I’m here to help you understand CVE-2026-98066. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70