CVE-2025-71192
High
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup. Found by code review.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Linux
PublishedFeb 4, 2026
First seenFeb 4, 2026
How to fix
Update
- Linux Linuxc80f9b3349a99a9d5b295f5bbc23f544c5995ad7, 21f8bc5179bed91c3f946adb5e55d717b891960c, fcc04c92cbb5497ce67c58dd2f0001bb87f40396, cb73d37ac18bc1716690ff5255a0ef1952827e9e, 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 ≤ v < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7, 74426fbff66eea8e8d1f42c8238c268d1e63a832 ≤ v < 21f8bc5179bed91c3f946adb5e55d717b891960c, 74426fbff66eea8e8d1f42c8238c268d1e63a832 ≤ v < fcc04c92cbb5497ce67c58dd2f0001bb87f40396, 74426fbff66eea8e8d1f42c8238c268d1e63a832 ≤ v < cb73d37ac18bc1716690ff5255a0ef1952827e9e, 74426fbff66eea8e8d1f42c8238c268d1e63a832 ≤ v < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f, 4.15 | c80f9b3349a99a9d5b295f5bbc23f544c5995ad7, 21f8bc5179bed91c3f946adb5e55d717b891960c, fcc04c92cbb5497ce67c58dd2f0001bb87f40396, cb73d37ac18bc1716690ff5255a0ef1952827e9e, 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.