CVE-2026-98066EPSS p6.5%
CVE-2026-98066CVE-2026-98066
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: caiaq: Fix potential double-free at error path
The fix for caiaq driver's resource management to handle the errors
tries to release the resources in a common destructor call, but as a
sashiko review for another patch suggested, some of the audio
resources such as URBs have been already freed, and this may lead to a
double-free.
For addressing the double-free, call the common destructor function
from each place, and assure that the resource pointers get cleared.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 6.5% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |