Slab Use-After-Free Vulnerability in Line6 USB Audio Driver from Linux Kernel

CVE-2026-99271

What is CVE-2026-99271?

A vulnerability in the Line6 USB audio driver within the Linux kernel allows for a slab use-after-free condition during audio playback. Specifically, when the capture buffer is released after all capture streams are closed, it does not properly clear the 'prev_fbuf' pointer. This oversight can lead to dereferencing stale pointers when playback is initiated again, potentially allowing an attacker to exploit this flaw to read unauthorized memory locations. The vulnerability arises within the 'submit_audio_out_urb' function and remains a concern until the necessary code adjustments are applied to prevent access to invalid memory.

References