CVE-2026-74505
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.
How to fix
- Linux Linuxd41bfea14ee6e063a953f6e72046088737c4e66c, 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5, a0bb5b9d39e54888385dc399c899223299201fe6, 49bc7741cd2761c703a292dc69245041ae8a67bd, 2de734dcbb210bd59983e13d36988acbcc122194, 11e2953d9f4c7c3d2af94a889c2d805c537d633f, 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c, a54bf16965f896415c3337bc4fbb40fb11941d99 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < d41bfea14ee6e063a953f6e72046088737c4e66c, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < a0bb5b9d39e54888385dc399c899223299201fe6, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < 49bc7741cd2761c703a292dc69245041ae8a67bd, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < 2de734dcbb210bd59983e13d36988acbcc122194, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < 11e2953d9f4c7c3d2af94a889c2d805c537d633f, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c, c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 ≤ v < a54bf16965f896415c3337bc4fbb40fb11941d99, 2.6.39 | d41bfea14ee6e063a953f6e72046088737c4e66c, 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5, a0bb5b9d39e54888385dc399c899223299201fe6, 49bc7741cd2761c703a292dc69245041ae8a67bd, 2de734dcbb210bd59983e13d36988acbcc122194, 11e2953d9f4c7c3d2af94a889c2d805c537d633f, 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c, a54bf16965f896415c3337bc4fbb40fb11941d99 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.