CVE-2026-53291

ALSA: hda/conexant: Fix missing error check for jack detection

MEDIUM
5.5
CVSS Score
Published: June 26, 2026 at 07:40 PM UTC
Updated: July 8, 2026 at 04:09 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR(). If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure. Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 6.7.45.15.149 ≤ v < 5.15.2096.1.77 ≤ v < 6.1.1756.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.6.16 ≤ v < 6.6.1416.7.4 ≤ v < 6.12.916.7.4 ≤ v < 6.86.8 ≤ v < 6.12.916.8 ≤ v < 6.18.336.8 ≤ v < 7.0.106.8 ≤ v < 7.124d748413cc4e1d97074bae1f335d32d30912f102cb659ef0ac744545499e7c37665b276d9e405da4a28302b2c681e3cf85e3b41231fff363c4c6a0e5.15.1496.1.776.6.166.7.47.1 rc17aeb259086487417f0fecf66e325bee133e8813af13b8cb5a6920ad98b751d3134686f29810577d4
Vendor states this is fixed in 1da5c73f3793b224696617a2a21def7500ba18d6 (fixed)
Vendor states this is fixed in 49c2c5924552e1d2f8b635dee663abebbb7cf63b (fixed)
Vendor states this is fixed in a2a33e87a2ffce3046c574d24eec4390c27c9365 (fixed)
Vendor states this is fixed in b0e2333a231107adedd38c6fcfe1adc6162716fc (fixed)
Vendor states this is fixed in d68f753d89f4ef6e410d7e8b7e8ab2fdde921b80 (fixed)
Vendor states this is fixed in dd110cc00cf854a8ecd8d003127a4178c28574ea (fixed)
Vendor states this is fixed in f837c7b85143a7c54140ff41ad5c076b73cd9933 (fixed)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.91 (unaffected)
Vendor states this is fixed in 6.18.33 (unaffected)
Vendor states this is fixed in 6.6.141 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
Vendor states this is fixed in 7.0.10 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card