CVE-2026-98066

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98066

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98066.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98066

Downstream

Related

openSUSE-SU-2026:12074-1

Published

2026-09-25T10:24:08Z

Modified

2026-10-09T17:26:59Z

Summary

ALSA: caiaq: Fix potential double-free at error path

Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: caiaq: Fix potential double-free at error path

The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free.

For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98066.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

da938aa9fc7826901921dcea225948ab21a97e45

Fixed

ddfff1cec52b7deec6c770ba85de4dab6221d0a2

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

09616e25f502080ba684fc7fcf959d1376ab756d

Fixed

da93fd9002d980bb02b729c5d5aeefeb252dd110

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

b956e48371f2ff72b76be9a829800ecec963bd45

Fixed

b6cd6f1664a0bc8038b9baa7e6f5fe8e4142d056

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

f537e3ad69609f6924a4db6b4a7f6561f5288bdd

Fixed

75b20534d7a37e091db585f8b505a3b77b7e81a8

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6251e3e256337a30160ef59ab1580dde4d1acd28

Fixed

2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

e59ecd4ee3a450db6cb4e4ecaa3efdd593f80056

Fixed

1dd715ca0568e4833ed5878f49b028b449941096

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

28abd224db4a49560b452115bca3672a20e45b2f

Fixed

b629ae7b3eddc6812d5af3614b8c1bd76d65fa75

Fixed

3b26ceef88c110f4d188387cffa0df78657be904

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.10.258

Fixed

5.10.271

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.15.209

Fixed

5.15.222

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.1.175

Fixed

6.1.189

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.6.140

Fixed

6.6.158

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.12.86

Fixed

6.12.111

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.18.27

Fixed

6.18.53

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7.0.4

Fixed

7.1

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

096dd8519cf2f768e9e14f224b627f7aaee1a9c5

Affected versions

v5.*

v5.10.258

v5.10.259

v5.10.260

v5.10.261

v5.10.262

v5.10.263

v5.10.264

v5.10.265

v5.10.266

v5.10.267

v5.10.268

v5.10.269

v5.10.270

v5.15.209

v5.15.210

v5.15.211

v5.15.212

v5.15.213

v5.15.214

v5.15.215

v5.15.216

v5.15.217

v5.15.218

v5.15.219

v5.15.220

v5.15.221

v6.*

v6.1.175

v6.1.176

v6.1.177

v6.1.178

v6.1.179

v6.1.180

v6.1.181

v6.1.182

v6.1.183

v6.1.184

v6.1.185

v6.1.186

v6.1.187

v6.1.188

v6.12.100

v6.12.101

v6.12.102

v6.12.103

v6.12.104

v6.12.105

v6.12.106

v6.12.107

v6.12.108

v6.12.109

v6.12.110

v6.12.86

v6.12.87

v6.12.88

v6.12.89

v6.12.90

v6.12.91

v6.12.92

v6.12.93

v6.12.94

v6.12.95

v6.12.96

v6.12.97

v6.12.98

v6.12.99

v6.18.27

v6.18.28

v6.18.29

v6.18.30

v6.18.31

v6.18.32

v6.18.33

v6.18.34

v6.18.35

v6.18.36

v6.18.37

v6.18.38

v6.18.39

v6.18.40

v6.18.41

v6.18.42

v6.18.43

v6.18.44

v6.18.45

v6.18.46

v6.18.47

v6.18.48

v6.18.49

v6.18.50

v6.18.51

v6.18.52

v6.6.140

v6.6.141

v6.6.142

v6.6.143

v6.6.144

v6.6.145

v6.6.146

v6.6.147

v6.6.148

v6.6.149

v6.6.150

v6.6.151

v6.6.152

v6.6.153

v6.6.154

v6.6.155

v6.6.156

v6.6.157

v7.*

v7.0.10

v7.0.11

v7.0.12

v7.0.13

v7.0.14

v7.0.4

v7.0.5

v7.0.6

v7.0.7

v7.0.8

v7.0.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98066.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.10.271

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.222

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.189

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.158

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.111

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.53

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98066.json"