In the Linux kernel, the following vulnerability has been resolved:
ALSA: mixer: oss: Add card disconnect checkpoints
ALSA OSS mixer layer calls the kcontrol ops rather individually, and
pending calls might be not always caught at disconnecting the device.
For avoiding the potential UAF scenarios, add sanity checks of the
card disconnection at each entry point of OSS mixer accesses. The
rwsem is taken just before that check, hence the rest context should
be covered by that properly.
References
Configurations
Configuration 1 (hide)
|
History
08 May 2026, 17:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| References | () https://git.kernel.org/stable/c/084d5d44418148662365eced3e126ad1a81ee3e2 - Patch | |
| References | () https://git.kernel.org/stable/c/8c097cf736993454acf3f711a3b376d6c7ad8965 - Patch | |
| References | () https://git.kernel.org/stable/c/ae583f113d15fa97e5234133c20d09f8e6214e47 - Patch | |
| References | () https://git.kernel.org/stable/c/e6645e625480cdf1079a4265f758d13b70721029 - Patch |
08 May 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
06 May 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 12:16
Updated : 2026-05-08 17:56
NVD link : CVE-2026-43126
Mitre link : CVE-2026-43126
CVE.ORG link : CVE-2026-43126
JSON object : View
Products Affected
linux
- linux_kernel
CWE