THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-43437 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() In the drain loop, the local variable 'runtime' is reassigned to a linked stream's runtime (runtime = s->runtime at line 2157). After r

[NVD] CVE-2026-43437 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() In the drain loop, the local variable 'runtime' is reassigned to a linked stream's runtime (runtime = s->runtime at line 2157). After r

lownvdPublished 2026-05-08

CVE-2026-43437 CVSS: 7.8 HIGH Published: 2026-05-08T15:16:56.037

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()

In the drain loop, the local variable 'runtime' is reassigned to a linked stream's runtime (runtime = s->runtime at line 2157). After releasing the stream lock at line 2169, the code access

Indicators of compromise

CVE-2026-43437cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43437