Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2025-71192

ALSA: ac97: fix a double free in snd_ac97_controller_register()

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup. Found by code review.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 74426fbff66eea8e8d1f42c8238c268d1e63a832 to < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7affected
  • 74426fbff66eea8e8d1f42c8238c268d1e63a832 to < 21f8bc5179bed91c3f946adb5e55d717b891960caffected
  • 74426fbff66eea8e8d1f42c8238c268d1e63a832 to < fcc04c92cbb5497ce67c58dd2f0001bb87f40396affected
  • 74426fbff66eea8e8d1f42c8238c268d1e63a832 to < cb73d37ac18bc1716690ff5255a0ef1952827e9eaffected
  • 74426fbff66eea8e8d1f42c8238c268d1e63a832 to < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0faffected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 6.1.161 to ≤ 6.1.*unaffected
  • 6.6.121 to ≤ 6.6.*unaffected
  • 6.12.66 to ≤ 6.12.*unaffected
  • 6.18.6 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References