Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23089

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() When snd_usb_create_mixer() fails, snd_usb_mixer_free() frees mixer->id_elems but the controls already added to the card still reference the freed memory. Later when snd_card_register() runs, the OSS mixer layer calls their callbacks and hits a use-after-free read. Call trace: get_ctl_value+0x63f/0x820 sound/usb/mixer.c:411 get_min_max_with_quirks.isra.0+0x240/0x
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:10835bbf3172b774c41270ec9bcd2f36b9e9d64c48faf8a1a32cd8e126dfc347
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/mixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.13"},{"lessThan":"2.6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/mixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"51b1aa6fe7dc87356ba58df06afb9677c9b841ea","status":"affected","version":"6639b6c2367f884ca172b78d69f7da17bfab2e5e","versionType":"git"},{"lessThan":"56fb6efd5d04caf6f14994d51ec85393b9a896c6","status":"affected","version":"6639b6c2367f884ca172b78d69f7da17bfab2e5e","versionType":"git"},{"lessThan":"7009daeefa945973a530b2f605fe445fc03747af","status":"affected","version":"6639b6c2367f884ca172b78d69f7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/usb/mixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.13"},{"lessThan":"2.6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/usb/mixer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"51b1aa6fe7dc87356ba58df06afb9677c9b841ea","status":"affected","version":"6639b6c2367f884ca172b78d69f7da17bfab2e5e","versionType":"git"},{"lessThan":"56fb6efd5d04caf6f14994d51ec85393b9a896c6","status":"affected","version":"6639b6c2367f884ca172b78d69f7da17bfab2e5e","versionType":"git"},{"lessThan":"7009daeefa945973a530b2f605fe445fc03747af","status":"affected","version":"6639b6c2367f884ca172b78d69f7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/51b1aa6fe7dc87356ba58df06afb9677c9b841ea"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/56fb6efd5d04caf6f14994d51ec85393b9a896c6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7009daeefa945973a530b2f605fe445fc03747af"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7bff0156d13f0ad9436e5178b979b063d59f572a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/930e69757b74c3ae083b0c3c7419bfe7f0edc7b2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/dc1a5dd80af1ee1f29d8375b12dd7625f6294dad"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/e6f103a22b08daf5df2f4aa158081840e5910963"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e6501bb4cc2e3a280aafb097a974aced41a9a82fbe2826593bb728820dbfb740 · sha256:4c63053192101286… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer