-

CVE-2026-74505

ALSA: 6fire: Fix UAF at error handling during probe

In the Linux kernel, the following vulnerability has been resolved:

ALSA: 6fire: Fix UAF at error handling during probe

Although 6fire driver had a few fixes for dealing with the early error
handling during the probe phase, it forgot a pending URB before
freeing the resources, which may lead to a UAF.

This patch addresses it by doing the almost same cleanup procedure
like the normal disconnect phase at the error path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < d41bfea14ee6e063a953f6e72046088737c4e66c
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < a0bb5b9d39e54888385dc399c899223299201fe6
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < 49bc7741cd2761c703a292dc69245041ae8a67bd
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < 2de734dcbb210bd59983e13d36988acbcc122194
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < 11e2953d9f4c7c3d2af94a889c2d805c537d633f
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
Status affected
Version c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Version < a54bf16965f896415c3337bc4fbb40fb11941d99
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.39
Status affected
Version 0
Version < 2.6.39
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/49bc7741cd2761c703a292dc69245041ae8a67bd
https://git.kernel.org/stable/c/2de734dcbb210bd59983e13d36988acbcc122194
https://git.kernel.org/stable/c/11e2953d9f4c7c3d2af94a889c2d805c537d633f
https://git.kernel.org/stable/c/630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
https://git.kernel.org/stable/c/a54bf16965f896415c3337bc4fbb40fb11941d99
https://git.kernel.org/stable/c/8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
https://git.kernel.org/stable/c/a0bb5b9d39e54888385dc399c899223299201fe6
https://git.kernel.org/stable/c/d41bfea14ee6e063a953f6e72046088737c4e66c