CVE-2026-64001

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: pcm: oss: Fix setup list UAF on proc write error<br /> <br /> snd_pcm_oss_proc_write() links a newly allocated setup entry into the<br /> OSS setup list before duplicating the task name. If the task-name<br /> allocation fails, the error path frees the already linked entry and<br /> leaves setup_list pointing at freed memory.<br /> <br /> A later OSS device open can then walk the stale list entry in<br /> snd_pcm_oss_look_for_setup() and dereference freed memory.<br /> <br /> Allocate the task name and initialize the setup entry before publishing<br /> the entry on setup_list. Also fetch the initial proc read iterator only<br /> after taking setup_mutex, so all setup_list traversal follows the same<br /> list lifetime rules.