CVE-2026-23089Published

ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-23089

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "sound/usb/mixer.c"
                    ],
                    "versions": [
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "51b1aa6fe7dc87356ba58df06afb9677c9b841ea",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "56fb6efd5d04caf6f14994d51ec85393b9a896c6",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "7009daeefa945973a530b2f605fe445fc03747af",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "7bff0156d13f0ad9436e5178b979b063d59f572a",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "e6f103a22b08daf5df2f4aa158081840e5910963",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "dc1a5dd80af1ee1f29d8375b12dd7625f6294dad",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6639b6c2367f884ca172b78d69f7da17bfab2e5e",
                            "lessThan": "930e69757b74c3ae083b0c3c7419bfe7f0edc7b2",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "sound/usb/mixer.c"
                    ],
                    "versions": [
                        {
                            "version": "2.6.13",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "2.6.13",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.10.249",
                            "lessThanOrEqual": "5.10.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.199",
                            "lessThanOrEqual": "5.15.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.162",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.122",
                            "lessThanOrEqual": "6.6.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.68",
                            "lessThanOrEqual": "6.12.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.8",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.19",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON