Threats Tagged 'cve-2026-43095'

A vulnerability in the Linux kernel's ASoC SDCA component related to improper IRQ cleanup has been resolved. The issue arises because IRQs are enabled via sdca_irq_populate() using devm_request_threaded_irq(), causing IRQs to persist after the sound card is torn down. This can lead to failures in IRQ handlers that store references to the card and controls, potentially causing crashes. The fix involves removing the use of devm and implementing manual cleanup of IRQs. The vulnerability affects multiple specific versions of the linux-hwe-edge kernel prior to 7.0.0-1006.6. A patch is available to address this issue. The CVSS score is 5.5, indicating medium severity, with impact limited to availability (denial of service).

Multiple vulnerabilities have been identified in the Linux kernel, which is the core component of the Linux operating system. These vulnerabilities are cataloged under CVE-2026-43059 and are associated with the CWE-416 category (Use After Free). The affected products include various Linux distributions such as Amazon Linux 2 and Debian Linux, as well as Google-related Linux environments. No specific technical details or CVSS scores are provided, and there are no known exploits in the wild at this time.