CVE-2026-72445

{"id": "CVE-2026-72445", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "53c23d56b46b1ae51574d92110895086aead7ad7", "versionType": "git"}, {"status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb", "versionType": "git"}, {"status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "3c7af07943b2718087ae791cad450af5cf646d90", "versionType": "git"}], "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"status": "unaffected", "version": "0", "lessThan": "6.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:18.403", "references": [{"url": "https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/53c23d56b46b1ae51574d92110895086aead7ad7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: qcom: clear opened when stream enable fails\n\nOn enable, subs->opened is set before the service_interval is validated;\nan invalid interval jumps to the response label without clearing it, so\nthe substream is wedged at -EBUSY until a disable or disconnect.\n\nClear subs->opened on the enable error path."}], "lastModified": "2026-08-17T06:19:11.960", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}