vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-74505

ALSA: 6fire: Fix UAF at error handling during probe

N/A
Published: August 15, 2026 at 12:27 PM UTC
Updated: August 19, 2026 at 05:21 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
2.6.39 ≤ v < 5.10.2652.6.39 ≤ v < 5.15.2162.6.39 ≤ v < 6.1.1832.6.39 ≤ v < 6.12.1032.6.39 ≤ v < 6.18.442.6.39 ≤ v < 6.6.1512.6.39 ≤ v < 7.1.82.6.39 ≤ v < 7.22.6.39c6d43ba816d1cf1d125bfbfc938f2a28a87facf9
Vendor states this is fixed in 11e2953d9f4c7c3d2af94a889c2d805c537d633f (fixed)
Vendor states this is fixed in 2de734dcbb210bd59983e13d36988acbcc122194 (fixed)
Vendor states this is fixed in 49bc7741cd2761c703a292dc69245041ae8a67bd (fixed)
Vendor states this is fixed in 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c (fixed)
Vendor states this is fixed in 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5 (fixed)
Vendor states this is fixed in a0bb5b9d39e54888385dc399c899223299201fe6 (fixed)
Vendor states this is fixed in a54bf16965f896415c3337bc4fbb40fb11941d99 (fixed)
Vendor states this is fixed in d41bfea14ee6e063a953f6e72046088737c4e66c (fixed)
Vendor states this is fixed in 2.6.39 (unaffected)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.103 (unaffected)
Vendor states this is fixed in 6.18.44 (unaffected)
Vendor states this is fixed in 6.6.151 (unaffected)
Vendor states this is fixed in 7.1.8 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/49bc7741cd2761c703a292dc69245041ae8a67bd
Source: cverecord
https://git.kernel.org/stable/c/2de734dcbb210bd59983e13d36988acbcc122194
Source: cverecord
https://git.kernel.org/stable/c/11e2953d9f4c7c3d2af94a889c2d805c537d633f
Source: cverecord
https://git.kernel.org/stable/c/630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
Source: cverecord
https://git.kernel.org/stable/c/a54bf16965f896415c3337bc4fbb40fb11941d99
Source: cverecord
https://git.kernel.org/stable/c/d41bfea14ee6e063a953f6e72046088737c4e66c
Source: cverecord
https://git.kernel.org/stable/c/8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
Source: cverecord
https://git.kernel.org/stable/c/a0bb5b9d39e54888385dc399c899223299201fe6

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card