CVE-2026-90214

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: xilinx: formatter_pcm: fix stream_data leak on open error

In xlnx_formatter_pcm_open(), stream_data is allocated and

adata->play_stream or adata->capture_stream is assigned early. If a

later step, such as snd_pcm_hw_constraint_step() or

snd_pcm_hw_constraint_integer(), fails, the function returns the error

immediately. ALSA does not call the close callback when open fails, so

stream_data is leaked and the stream pointer is left dangling, pointing

to a substream that ALSA frees. A later interrupt would then call

snd_pcm_period_elapsed() on the freed substream.

Free stream_data and clear the stream pointer on the error paths.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References