CVE-2026-53192
Linux Linux, linux kernel 취약점
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g. when a userspace timer (CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it tries to detach the timer instances and release the resources. However, it's still possible that other in-flight tasks are holding the timer instance where the to-be-deleted timer object is associated, and this may lead to racy accesses. Fortunately, most of ioctls dealing with the timer instance list already have the protection with register_mutex, and t...
- 대응 우선순위
- 점검
- CVSS
- 7.8
- EPSS
- 0.13% 백분위 2.60% · 2026.07.29 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.25