CVE-2025-71192
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
ALSA: ac97: fix a double free in snd_ac97_controller_register()
If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup.
Found by code review.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7 | affected |
| Linux | Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 < 21f8bc5179bed91c3f946adb5e55d717b891960c | affected |
| Linux | Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 < fcc04c92cbb5497ce67c58dd2f0001bb87f40396 | affected |
| Linux | Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 < cb73d37ac18bc1716690ff5255a0ef1952827e9e | affected |
| Linux | Linux | 74426fbff66eea8e8d1f42c8238c268d1e63a832 < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f | affected |
| Linux | Linux | 4.15 | affected |
| Linux | Linux | 0 < 4.15 | unaffected |
| Linux | Linux | 6.1.161 <= 6.1.* | unaffected |
| Linux | Linux | 6.6.121 <= 6.6.* | unaffected |
| Linux | Linux | 6.12.66 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.6 <= 6.18.* | unaffected |
| Linux | Linux | 6.19 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/c80f9b3349a99a9d5b295f5bbc23f544c5995ad7
- https://git.kernel.org/stable/c/21f8bc5179bed91c3f946adb5e55d717b891960c
- https://git.kernel.org/stable/c/fcc04c92cbb5497ce67c58dd2f0001bb87f40396
- https://git.kernel.org/stable/c/cb73d37ac18bc1716690ff5255a0ef1952827e9e
- https://git.kernel.org/stable/c/830988b6cf197e6dcffdfe2008c5738e6c6c3c0f
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.