Search: CVE-2026-23089

A use-after-free vulnerability in the Linux kernel's ALSA usb-audio subsystem was fixed. The flaw occurs when snd_usb_create_mixer() fails, leading snd_usb_mixer_free() to free memory still referenced by controls, causing a use-after-free read during snd_card_register(). This vulnerability has a CVSS score of 7.8 and affects specific Linux kernel versions. A patch is available to address the issue by properly removing mixer controls before freeing memory.