{"id":"CVE-2026-89890","revision":"4e320c8c76f94da388bde41b32db52df","records":[{"revision":"4e320c8c76f94da388bde41b32db52df","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89890","aliases":[],"title":"media: go7007: defer the ALSA v4l2 put until card release","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: go7007: defer the ALSA v4l2 put until card release\n\ngo7007_snd_init() already takes a v4l2_device reference for the ALSA\nside, but go7007_snd_remove() drops it immediately after calling\nsnd_card_free_when_closed().\n\nThat is too early when a userspace process still has the capture PCM open.\nThe ALSA card and its PCM callbacks remain alive until the last file is\nclosed, so the release path can still reach struct go7007 through\npcm->private_data and call go7007_snd_hw_free() after the V4L2 release path\nhas freed the object.\n\nMove the matching v4l2_device_put() to the ALSA card private_free callback\nso the existing ALSA reference covers the whole deferred card lifetime.","state":0,"publishedAt":"2026-09-16T10:31:53.276+00:00","modifiedAt":"2026-10-19T08:54:23.263+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/usb/go7007/snd-go7007.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"1c57d1a3396b2d767d58f10dff09bb397586c714\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"9c4f9628b8558c87903492a777834cc5be14ded3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"b7a0de398ad510426db9c8e96c516ef7abf48b0e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"1c9fdd9465211432d5c0ff70caaec0be245823d5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"29fe4d38fb59ec28ca656cb2dabc2b0f78e78980\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"0745a59945d927652d892437f9647ed6e87c0677\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"e6f1a1ac9b8ccabfec548aef0d0d93eaf4dba4f4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5d3a7cc127d096c22ad63c4ff72970e1beb22ef\",\n                            \"lessThan\": \"1bd456afeb8a515137e567967069fce6f8fcd23e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/usb/go7007/snd-go7007.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.10\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.270\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/1c57d1a3396b2d767d58f10dff09bb397586c714","https://git.kernel.org/stable/c/9c4f9628b8558c87903492a777834cc5be14ded3","https://git.kernel.org/stable/c/b7a0de398ad510426db9c8e96c516ef7abf48b0e","https://git.kernel.org/stable/c/1c9fdd9465211432d5c0ff70caaec0be245823d5","https://git.kernel.org/stable/c/29fe4d38fb59ec28ca656cb2dabc2b0f78e78980","https://git.kernel.org/stable/c/0745a59945d927652d892437f9647ed6e87c0677","https://git.kernel.org/stable/c/e6f1a1ac9b8ccabfec548aef0d0d93eaf4dba4f4","https://git.kernel.org/stable/c/1bd456afeb8a515137e567967069fce6f8fcd23e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89890","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89890","identifiers":["CVE-2026-89890"]},"retained":false,"historicalAffected":[]}],"coverage":[]}