Memory Management Bug in Linux Kernel's USBTV Media Driver

CVE-2026-90032

What is CVE-2026-90032?

A vulnerability in the Linux kernel's USBTV media driver can lead to improper memory management during operations involving ALSA PCM callbacks. When a USB audio device is disconnected while an open PCM file exists, it can cause a situation where the driver state is incorrectly handled. This results in a potential dereference of freed memory in the snd_usbtv_pcm_close() function, creating opportunities for exploitation. The vulnerability highlights the importance of maintaining valid device references and ensuring that resources are properly managed throughout the lifecycle of USB audio interactions.

References