« Volver al listado

CVE-2026-89895

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

media: cobalt: Avoid freeing ALSA private data twice

snd_cobalt_card_create() stores cobsc in sc->private_data and installs snd_cobalt_card_private_free() as sc->private_free. From that point, snd_card_free(sc) releases cobsc through the ALSA card cleanup path.

If cobalt_alsa_init() fails after snd_cobalt_card_create(), the err_exit_free path calls snd_card_free(sc) and then kfree(cobsc). That second free releases the same object again.

Remove the explicit kfree(cobsc) and leave ownership with the ALSA card.

This issue was found by a static analysis checker and confirmed by manual source review.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89895",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "75bbf45e3a954e292ae26832d2df40ca2e3ee452",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "fe65028ee72a7e07e572b351891bd7a1f8917d33",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "61dfa8ded5efc3a25d331fa9ce5cebb85531fe70",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "42e00371f83c3fc7b99a36bf0229c74ad5d3c7d8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "6cbc8a73b3464ebeccc49987b7233b6b087b8504",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "cb1218da234ea15fa14d90e2d049d686874d7aa3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "8c6610e230b9355cf7df5a338a0592c0f088c00b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "85756a069c55e0315ac5990806899cfb607b987f",
              "lessThan": "3a7d6b9c4cb5ac18cbd3f1c7f8c7b159c42ba0b1",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/media/pci/cobalt/cobalt-alsa-main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.2",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.51",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/media/pci/cobalt/cobalt-alsa-main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-16T11:16:58.270",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/3a7d6b9c4cb5ac18cbd3f1c7f8c7b159c42ba0b1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/42e00371f83c3fc7b99a36bf0229c74ad5d3c7d8",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/61dfa8ded5efc3a25d331fa9ce5cebb85531fe70",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6cbc8a73b3464ebeccc49987b7233b6b087b8504",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/75bbf45e3a954e292ae26832d2df40ca2e3ee452",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8c6610e230b9355cf7df5a338a0592c0f088c00b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cb1218da234ea15fa14d90e2d049d686874d7aa3",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fe65028ee72a7e07e572b351891bd7a1f8917d33",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cobalt: Avoid freeing ALSA private data twice\n\nsnd_cobalt_card_create() stores cobsc in sc->private_data and installs\nsnd_cobalt_card_private_free() as sc->private_free. From that point,\nsnd_card_free(sc) releases cobsc through the ALSA card cleanup path.\n\nIf cobalt_alsa_init() fails after snd_cobalt_card_create(), the\nerr_exit_free path calls snd_card_free(sc) and then kfree(cobsc). That\nsecond free releases the same object again.\n\nRemove the explicit kfree(cobsc) and leave ownership with the ALSA card.\n\nThis issue was found by a static analysis checker and confirmed by\nmanual source review."
    }
  ],
  "lastModified": "2026-09-16T11:16:58.270",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}