PT-2026-43958 · Linux+1 · Linux Kernel+1

·

CVE-2026-46090

·

Published

2026-05-27

·

Updated

2026-07-24

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A Use-After-Free (UAF) issue exists in the ALSA loopback driver. The loopback check format() function may stop the capture side when playback starts with parameters that do not match a running capture stream. While peer lookup is performed under cable->lock, the snd pcm stop() function executes after the lock is released. A concurrent close operation can remove the capture entry from cable->streams[] and free its runtime while the playback trigger path still holds a stale peer substream pointer.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:27353
ALSA-2026:27354
ALSA-2026:30848
ALSA-2026:33685
CVE-2026-46090
ECHO-DAA2-728B-BAA1
OPENSUSE-SU-2026:10954-1
OPENSUSE-SU-2026:20965-1
RHSA-2026:27353
RHSA-2026:27354
RHSA-2026:33685
RHSA-2026:33899
RHSA-2026:33900
RHSA-2026:34094
RHSA-2026:34095
RHSA-2026:34443
SUSE-SU-2026:22099-1
SUSE-SU-2026:22108-1
SUSE-SU-2026:22112-1
SUSE-SU-2026:22117-1
SUSE-SU-2026:22127-1
SUSE-SU-2026:22137-1
SUSE-SU-2026:22433-1
SUSE-SU-2026:22458-1
SUSE-SU-2026:2450-1
SUSE-SU-2026:2482-1
SUSE-SU-2026:2591-1
SUSE-SU-2026:2632-1
SUSE-SU-2026:2839-1
SUSE-SU-2026:2840-1
SUSE-SU-2026:2841-1
SUSE-SU-2026:3044-1
SUSE-SU-2026:3089-1
USN-8488-1
USN-8488-2
USN-8489-1
USN-8507-1
USN-8567-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8595-1
USN-8595-2
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1

Affected Products

Linux Kernel
Rocky Linux