7.8

CVE-2026-89890

media: go7007: defer the ALSA v4l2 put until card release

In the Linux kernel, the following vulnerability has been resolved:

media: go7007: defer the ALSA v4l2 put until card release

go7007_snd_init() already takes a v4l2_device reference for the ALSA
side, but go7007_snd_remove() drops it immediately after calling
snd_card_free_when_closed().

That is too early when a userspace process still has the capture PCM open.
The ALSA card and its PCM callbacks remain alive until the last file is
closed, so the release path can still reach struct go7007 through
pcm->private_data and call go7007_snd_hw_free() after the V4L2 release path
has freed the object.

Move the matching v4l2_device_put() to the ALSA card private_free callback
so the existing ALSA reference covers the whole deferred card lifetime.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 1c57d1a3396b2d767d58f10dff09bb397586c714
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 9c4f9628b8558c87903492a777834cc5be14ded3
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < b7a0de398ad510426db9c8e96c516ef7abf48b0e
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 1c9fdd9465211432d5c0ff70caaec0be245823d5
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 29fe4d38fb59ec28ca656cb2dabc2b0f78e78980
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 0745a59945d927652d892437f9647ed6e87c0677
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < e6f1a1ac9b8ccabfec548aef0d0d93eaf4dba4f4
Status affected
Version d5d3a7cc127d096c22ad63c4ff72970e1beb22ef
Version < 1bd456afeb8a515137e567967069fce6f8fcd23e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.10
Status affected
Version 0
Version < 3.10
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1c57d1a3396b2d767d58f10dff09bb397586c714
https://git.kernel.org/stable/c/9c4f9628b8558c87903492a777834cc5be14ded3
https://git.kernel.org/stable/c/b7a0de398ad510426db9c8e96c516ef7abf48b0e
https://git.kernel.org/stable/c/1c9fdd9465211432d5c0ff70caaec0be245823d5
https://git.kernel.org/stable/c/29fe4d38fb59ec28ca656cb2dabc2b0f78e78980
https://git.kernel.org/stable/c/0745a59945d927652d892437f9647ed6e87c0677
https://git.kernel.org/stable/c/e6f1a1ac9b8ccabfec548aef0d0d93eaf4dba4f4
https://git.kernel.org/stable/c/1bd456afeb8a515137e567967069fce6f8fcd23e