Use-After-Free Vulnerability in Linux Kernel Sound Card Management

CVE-2026-43459

What is CVE-2026-43459?

A use-after-free vulnerability has been identified in the sound card management of the Linux kernel. This issue arises when a sound card is unbound while a PCM stream remains open, potentially leading to memory corruption. Specifically, the vulnerability occurs due to improper handling in the snd_soc_dapm_stream_event() function, which allows for new delayed work to be scheduled even after the sound card's resources are being cleaned up. If not addressed, this may result in the system's memory being accessed incorrectly, posing security risks to users and affecting system stability.

References