Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74505

ALSA: 6fire: Fix UAF at error handling during probe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < d41bfea14ee6e063a953f6e72046088737c4e66caffected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5affected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < a0bb5b9d39e54888385dc399c899223299201fe6affected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < 49bc7741cd2761c703a292dc69245041ae8a67bdaffected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < 2de734dcbb210bd59983e13d36988acbcc122194affected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < 11e2953d9f4c7c3d2af94a889c2d805c537d633faffected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0caffected
  • c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 to < a54bf16965f896415c3337bc4fbb40fb11941d99affected

Linux Linux

Default version status: affected

  • 2.6.39affected
  • 0 to < 2.6.39unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References