CVE-2026-53192

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: timer: Fix UAF at snd_timer_user_params()<br /> <br /> At releasing a timer object, e.g. when a userspace timer<br /> (CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it<br /> tries to detach the timer instances and release the resources.<br /> However, it&amp;#39;s still possible that other in-flight tasks are holding<br /> the timer instance where the to-be-deleted timer object is associated,<br /> and this may lead to racy accesses.<br /> <br /> Fortunately, most of ioctls dealing with the timer instance list<br /> already have the protection with register_mutex, and this also avoids<br /> such races. But, SNDRV_TIMER_IOCTL_PARAMS isn&amp;#39;t protected, hence the<br /> concurrent ioctl may lead to use-after-free.<br /> <br /> This patch just adds the guard with register_mutex to protect<br /> snd_timer_user_params() for covering the code path as a quick<br /> workaround. It&amp;#39;s no hot-path but rather a rarely issued ioctl, so the<br /> performance penalty doesn&amp;#39;t matter.