CVE-2026-98066

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 25, 2026
First seenSep 25, 2026

How to fix

Update
  • Linux Linuxddfff1cec52b7deec6c770ba85de4dab6221d0a2, da93fd9002d980bb02b729c5d5aeefeb252dd110, b6cd6f1664a0bc8038b9baa7e6f5fe8e4142d056, 75b20534d7a37e091db585f8b505a3b77b7e81a8, 2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8, 1dd715ca0568e4833ed5878f49b028b449941096, b629ae7b3eddc6812d5af3614b8c1bd76d65fa75, 3b26ceef88c110f4d188387cffa0df78657be904, 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.1 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxda938aa9fc7826901921dcea225948ab21a97e45 ≤ v < ddfff1cec52b7deec6c770ba85de4dab6221d0a2, 09616e25f502080ba684fc7fcf959d1376ab756d ≤ v < da93fd9002d980bb02b729c5d5aeefeb252dd110, b956e48371f2ff72b76be9a829800ecec963bd45 ≤ v < b6cd6f1664a0bc8038b9baa7e6f5fe8e4142d056, f537e3ad69609f6924a4db6b4a7f6561f5288bdd ≤ v < 75b20534d7a37e091db585f8b505a3b77b7e81a8, 6251e3e256337a30160ef59ab1580dde4d1acd28 ≤ v < 2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8, e59ecd4ee3a450db6cb4e4ecaa3efdd593f80056 ≤ v < 1dd715ca0568e4833ed5878f49b028b449941096, 28abd224db4a49560b452115bca3672a20e45b2f ≤ v < b629ae7b3eddc6812d5af3614b8c1bd76d65fa75, 28abd224db4a49560b452115bca3672a20e45b2f ≤ v < 3b26ceef88c110f4d188387cffa0df78657be904, 096dd8519cf2f768e9e14f224b627f7aaee1a9c5, 5.10.258 ≤ v < 5.10.271, 5.15.209 ≤ v < 5.15.222, 6.1.175 ≤ v < 6.1.189, 6.6.140 ≤ v < 6.6.158, 6.12.86 ≤ v < 6.12.111, 6.18.27 ≤ v < 6.18.53, 7.0.4 ≤ v < 7.1, 7.1ddfff1cec52b7deec6c770ba85de4dab6221d0a2, da93fd9002d980bb02b729c5d5aeefeb252dd110, b6cd6f1664a0bc8038b9baa7e6f5fe8e4142d056, 75b20534d7a37e091db585f8b505a3b77b7e81a8, 2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8, 1dd715ca0568e4833ed5878f49b028b449941096, b629ae7b3eddc6812d5af3614b8c1bd76d65fa75, 3b26ceef88c110f4d188387cffa0df78657be904, 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.