The ALSA caiaq driver’s probe routine did not handle errors gracefully. When snd_card_register() failed, the routine called snd_card_free() and then continued executing, exposing the card structure to a use‑after‑free (UAF). This flaw allows a privileged user to cause an arbitrary memory free and subsequently execute code in the kernel context, leading to privilege escalation or denial of service.

All Linux kernel instances that include the ALSA caiaq driver are susceptible unless the kernel has been updated to the patched version. Specific version information is not cited, so any kernel prior to the patch is considered affected.

The CVSS score is not provided, but the nature of the vulnerability—an unreclaimed kernel memory free—normally falls into a high severity band. The EPSS score is unavailable and the vulnerability is not present in CISA’s KEV catalog, suggesting no confirmed exploits yet. However, because the kernel can be treated as a local privilege escalation vector, the risk remains significant for systems with the driver enabled.