ALSA: 6fire: Fix UAF at error handling during probe (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.
References
- https://git.kernel.org/stable/c/d41bfea14ee6e063a953f6e72046088737c4e66c
- https://git.kernel.org/stable/c/8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
- https://git.kernel.org/stable/c/a0bb5b9d39e54888385dc399c899223299201fe6
- https://git.kernel.org/stable/c/49bc7741cd2761c703a292dc69245041ae8a67bd
- https://git.kernel.org/stable/c/2de734dcbb210bd59983e13d36988acbcc122194
- https://git.kernel.org/stable/c/11e2953d9f4c7c3d2af94a889c2d805c537d633f
- https://git.kernel.org/stable/c/630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
- https://git.kernel.org/stable/c/a54bf16965f896415c3337bc4fbb40fb11941d99
European references
- ENISA EUVD · EUVD-2026-59698
- GCVE · GCVE-0-2026-74505
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1090 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < d41bfea14ee6e063a953f6e72046088737c4e66c ; affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5 ; affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < a0bb5b9d39e54888385dc399c899223299201fe6 ; affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 49bc7741cd2761c703a292dc69245041ae8a67bd ; affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 2de734dcbb210bd59983e13d36988acbcc122194 ; affected c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 11e2953d9f4c7c3d2af94a889c2d805c537d633f |
| Linux · Linux | affected 2.6.39 ; unaffected 0 < 2.6.39 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |