Riskcovery

CVE-2026-89895

media: cobalt: Avoid freeing ALSA private data twice

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: cobalt: Avoid freeing ALSA private data twice

snd_cobalt_card_create() stores cobsc in sc->private_data and installs snd_cobalt_card_private_free() as sc->private_free. From that point, snd_card_free(sc) releases cobsc through the ALSA card cleanup path.

If cobalt_alsa_init() fails after snd_cobalt_card_create(), the err_exit_free path calls snd_card_free(sc) and then kfree(cobsc). That second free releases the same object again.

Remove the explicit kfree(cobsc) and leave ownership with the ALSA card.

This issue was found by a static analysis checker and confirmed by manual source review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 85756a069c55e0315ac5990806899cfb607b987f to before 75bbf45e3a954e292ae26832d2df40ca2e3ee452Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before fe65028ee72a7e07e572b351891bd7a1f8917d33Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before 61dfa8ded5efc3a25d331fa9ce5cebb85531fe70Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before 42e00371f83c3fc7b99a36bf0229c74ad5d3c7d8Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before 6cbc8a73b3464ebeccc49987b7233b6b087b8504Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before cb1218da234ea15fa14d90e2d049d686874d7aa3Affected
  • 85756a069c55e0315ac5990806899cfb607b987f to before 8c6610e230b9355cf7df5a338a0592c0f088c00bAffected
  • 85756a069c55e0315ac5990806899cfb607b987f to before 3a7d6b9c4cb5ac18cbd3f1c7f8c7b159c42ba0b1Affected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 5.10.270 through 5.10.*Not affected
  • 5.15.221 through 5.15.*Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.51 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.