Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-53291

ALSA: hda/conexant: Fix missing error check for jack detection

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.209, 6.1.175, 6.6.141, 6.8
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR(). If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure. Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.

Timeline

  1. CVE published

Affected versions

  • Linux Linux

    From 5.15.149 · fixed in 5.15.209; From 6.1.77 · fixed in 6.1.175; From 6.6.16 · fixed in 6.6.141; From 6.7.4 · fixed in 6.8

  • Linux Linux

    6.8

References 7

git.kernel.org