In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setup_card() registers… (CVE-2026-98837)

The vulnerability in the Linux kernel ALSA caiaq driver arises because setup_card() registers an input device whose pointers reference the snd_usb_caiaqdev structure. If snd_card_register() or snd_usb_caiaq_control_init() fails, snd_probe() calls snd_card_free(), which frees device state but does not unregister the input device, leaving a dangling pointer. Subsequent access to the input device's uevent attribute dereferences freed memory, causing a kernel use-after-free error detected by KASAN. The fix involves unregistering the input device on the probe error path, mirroring the behavior in snd_disconnect().

This vulnerability can lead to a kernel use-after-free condition, potentially causing kernel crashes or memory corruption. However, no known exploits in the wild have been reported.

A fix has been implemented that unregisters the input device on probe failure paths to prevent use-after-free. Users should update to the Linux kernel version that includes this patch once available. No additional mitigation steps are indicated.