CVE-2026-98066

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

Is your site exposed to CVE-2026-98066?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/1dd715ca0568e4833ed5878f49b028b449941096 https://git.kernel.org/stable/c/2883d65a3d9a8d9a682cdb003e6ab7fb28bb17f8 https://git.kernel.org/stable/c/3b26ceef88c110f4d188387cffa0df78657be904 https://git.kernel.org/stable/c/b629ae7b3eddc6812d5af3614b8c1bd76d65fa75

Frequently Asked Questions

What is CVE-2026-98066? +

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch suggested, some of the audio resources such as URBs have been already freed, and this may lead to a double-free. For addressing the double-free, call the common destructor function from each place, and assure that the resource pointers get cleared.

How do I check if I'm vulnerable to CVE-2026-98066? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.