https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:06:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89895 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cobalt: Avoid freeing ALSA private data twice</p> <p>snd_cobalt_card_create() stores cobsc in sc-&gt;private_data and installs snd_cobalt_card_private_free() as sc-&gt;private_free. From that point, snd_card_free(sc) releases cobsc through the ALSA card cleanup path.</p> <p>If cobalt_alsa_init() fails after snd_cobalt_card_create(), the err_exit_free path calls snd_card_free(sc) and then kfree(cobsc). That second free releases the same object again.</p> <p>Remove the explicit kfree(cobsc) and leave ownership with the ALSA card.</p> <p>This issue was found by a static analysis checker and confirmed by manual source review.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cobalt: Avoid freeing ALSA private data twice</p> <p>snd_cobalt_card_create() stores cobsc in sc-&gt;private_data and installs snd_cobalt_card_private_free() as sc-&gt;private_free. From that point, snd_card_free(sc) releases cobsc through the ALSA card cleanup path.</p> <p>If cobalt_alsa_init() fails after snd_cobalt_card_create(), the err_exit_free path calls snd_card_free(sc) and then kfree(cobsc). That second free releases the same object again.</p> <p>Remove the explicit kfree(cobsc) and leave ownership with the ALSA card.</p> <p>This issue was found by a static analysis checker and confirmed by manual source review.</p> https://vulnerability.circl.lu/vuln/cve-2026-89895