Linux Kernel ASoC Vulnerability in Sound Card Management

CVE-2026-43095

What is CVE-2026-43095?

A vulnerability exists in the Linux kernel's ASoC (ALSA System on Chip) subsystem that can lead to improper management of IRQs (Interrupt Requests) during sound card operations. When the sound card is decommissioned, the IRQs can continue to persist, resulting in potential crashes due to lingering references to the sound card and its controls. This issue has been addressed by modifying the IRQ request handling to avoid using devm (device management) outside of bus probing. The updated implementation ensures that IRQs are registered more safely, thereby enhancing the stability and reliability of sound card management in the Linux kernel.

References