CVE-2026-89895 | Linux Kernel up to 7.2.4 Cobalt snd_cobalt_card_create private_data/private_free double free

A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.4. Impacted is the function snd_cobalt_card_create of the component Cobalt. Executing a manipulation of the argument private_data/private_free can lead to double free.

This vulnerability appears as CVE-2026-89895. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More