Improper update of reference count in Linux kernel - CVE-2026-89944

Vulnerability details

The vulnerability allows a local privileged user to cause a denial of service.

The vulnerability exists due to improper reference count management in hdac_hda_dev_probe() when ASoC component registration fails during device probing. A local privileged user can cause component registration to fail to cause a denial of service.

Affected software

How to mitigate CVE-2026-89944

External References

• https://git.kernel.org/stable/c/6ad4892c4f5cb437a928a02f5b7d37d496aa9268
• https://git.kernel.org/stable/c/7eef9ae3b4ef782557526dd8ba0c206f028d8c2f
• https://git.kernel.org/stable/c/cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c
• https://git.kernel.org/stable/c/e8ea01a0457080b0cc7c69c430c0ab65d84dc377

Related Security Bulletins

• Improper update of reference count in Linux kernel soc codecs