---
id: CVE-2026-43126
title: 'ALSA: mixer: oss: Add card disconnect checkpoints'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ALSA: mixer: oss: Add card disconnect checkpoints

  ALSA OSS mixer layer calls the kcontrol ops rather individually, and
  pending calls might be not always caught at disc…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    20c52a70414095447da1be076f492cc7a6dce7cf
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ae583f113d15fa97e5234133c20d09f8e6214e47
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    e6645e625480cdf1079a4265f758d13b70721029
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    8c097cf736993454acf3f711a3b376d6c7ad8965
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    084d5d44418148662365eced3e126ad1a81ee3e2
  - Linux 2.6.12
published: '2026-05-06'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:40:08.869Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43126'
references:
  - url: 'https://git.kernel.org/stable/c/20c52a70414095447da1be076f492cc7a6dce7cf'
  - url: 'https://git.kernel.org/stable/c/ae583f113d15fa97e5234133c20d09f8e6214e47'
  - url: 'https://git.kernel.org/stable/c/e6645e625480cdf1079a4265f758d13b70721029'
  - url: 'https://git.kernel.org/stable/c/8c097cf736993454acf3f711a3b376d6c7ad8965'
  - url: 'https://git.kernel.org/stable/c/084d5d44418148662365eced3e126ad1a81ee3e2'
tags:
  - cve.org
epss: 0.00175
epssPercentile: 0.06604
ingestedAt: '2026-10-21T12:48:53.647Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ALSA: mixer: oss: Add card disconnect checkpoints

ALSA OSS mixer layer calls the kcontrol ops rather individually, and
pending calls might be not always caught at disconnecting the device.

For avoiding the potential UAF scenarios, add sanity checks of the
card disconnection at each entry point of OSS mixer accesses.  The
rwsem is taken just before that check, hence the rest context should
be covered by that properly.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 20c52a70414095447da1be076f492cc7a6dce7cf`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ae583f113d15fa97e5234133c20d09f8e6214e47`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e6645e625480cdf1079a4265f758d13b70721029`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8c097cf736993454acf3f711a3b376d6c7ad8965`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 084d5d44418148662365eced3e126ad1a81ee3e2`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.