CVE-2026-90032

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-90032

Key Details

CVE	CVE-2026-90032
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

media: usbtv: keep device alive while ALSA card exists

The ALSA PCM callbacks store the driver state in pcm->private_data. An

open PCM file can outlive USB disconnect because usbtv_audio_free() uses

snd_card_free_when_closed(). The disconnect path can then drop the V4L2

device reference and free struct usbtv before ALSA releases the substream,

so a later close dereferences freed memory in snd_usbtv_pcm_close().

Take a V4L2 device reference for the ALSA card and drop it from the card

private_free callback. This keeps struct usbtv valid until ALSA has closed

the remaining files and freed the card. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-90032
CVE	https://www.cve.org/CVERecord?id=CVE-2026-90032

Source

Reference

NVD

CVE