Use-after-free in Linux kernel - CVE-2026-98428
Published: October 15, 2026
Vulnerability identifier: #VU155882
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98428
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to trigger a use-after-free in the kernel.
The vulnerability exists due to improper lifetime management of reference-counted USB request blocks in the ALSA USB 6fire driver when releasing embedded USB request blocks asynchronously. A local user can exercise the affected URB release paths to trigger a use-after-free in the kernel.
The affected URBs are embedded in structures used for PCM, MIDI, and communication.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-98428
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.113-1
linux (Debian package) - update to 6.12.113-1
External References
- https://git.kernel.org/stable/c/3ef9093d83ffecb8e5f6c9d5769a52d39df74f7a
- https://git.kernel.org/stable/c/52a43c2d57e774489ac3fbbac06ff02f19bd9a52
- https://git.kernel.org/stable/c/8b8559aeaba2e51cfee1779b2383b085991f7d81
- https://git.kernel.org/stable/c/999f433c09e4668412bd68ca207ae2b4af863862
- https://git.kernel.org/stable/c/9fe49dbc023e82dfaee7b245997d820d01742a9a
- https://git.kernel.org/stable/c/d181434549b3da668110a25d743848cce9897f4e