{"id":24720,"date":"2026-09-16T20:32:41","date_gmt":"2026-09-16T12:32:41","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90032"},"modified":"2026-09-16T20:32:41","modified_gmt":"2026-09-16T12:32:41","slug":"cve-2026-90032","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90032","title":{"rendered":"CVE-2026-90032 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: usbtv: keep de"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>media: usbtv: keep device alive while ALSA card exists<\/p>\n<p>The ALSA PCM callbacks store the driver state in pcm-&gt;private_data. An<br \/>\nopen PCM file can outlive USB disconnect because usbtv_audio_free() uses<br \/>\nsnd_card_free_when_closed(). The disconnect path can then drop the V4L2<br \/>\ndevice reference and free struct usbtv before ALSA releases the substream,<br \/>\nso a later close dereferences freed memory in snd_usbtv_pcm_close().<\/p>\n<p>Take a V4L2 device reference for the ALSA card and drop it from the card<br \/>\nprivate_free callback. This keeps struct usbtv valid until ALSA has closed<br \/>\nthe remaining files and freed the card.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>media: usbtv: keep device alive while ALSA card exists<\/p>\n<p>The ALSA PCM callbacks store the driver state in pcm-&gt;private_data. An<br \/>\nopen<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-24720","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/24720","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24720"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24720"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24720"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}