CVE-2026-43126
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: mixer: oss: Add card disconnect checkpoints<br />
<br />
ALSA OSS mixer layer calls the kcontrol ops rather individually, and<br />
pending calls might be not always caught at disconnecting the device.<br />
<br />
For avoiding the potential UAF scenarios, add sanity checks of the<br />
card disconnection at each entry point of OSS mixer accesses. The<br />
rwsem is taken just before that check, hence the rest context should<br />
be covered by that properly.



