In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
When snd_usb_create_mixer() fails, snd_usb_mixer_free() frees mixer->id_elems but the controls already added to the card still reference the freed memory. Later when snd_card_register() runs, the OSS mixer layer calls their callbacks and hits a use-after-free read.
Call trace: get_ctl_value+0x63f/0x820 sound/usb/mixer.c:411 get_min_max_with_quirks.isra.0+0x240/0x1f40 sound/usb/mixer.c:1241 mixer_ctl_feature_info+0x26b/0x490 sound/usb/mixer.c:1381 snd_mixer_oss_build_test+0x174/0x3a0 sound/core/oss/mixer_oss.c:887 ... snd_card_register+0x4ed/0x6d0 sound/core/init.c:923 usb_audio_probe+0x5ef/0x2a90 sound/usb/card.c:1025
Fix by calling snd_ctl_remove() for all mixer controls before freeing id_elems. We save the next pointer first because snd_ctl_remove() frees the current element.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 13, 2026 | Feb 4, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 4, 2026 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-default | Feb 25, 2026 | Feb 25, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-generic-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcpUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-azure-fde-6.17Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-176-fipsUpgrade linux-image-oem-24.04dUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtime-6.17Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-aws | Apr 10, 2026 | Feb 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub