CVE-2026-90119

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup snd_ice1712_probe() performs multiple initialization steps after snd_card_new(), but directly returns on failures from later steps without releasing the ALSA card, causing resource leaks when probing fails. Use snd_devm_card_new() together with scope-based cleanup via __free(snd_card_unref), and clear the card pointer after successful registration to keep it alive.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/24b399f51812d727dc25d7814c4d7e0cca38201e
https://git.kernel.org/stable/c/b15782627b6562f7b6d628f4699316f26340f835
https://git.kernel.org/stable/c/c5c7c7b6cfae73c46e4544a9ef08ff89231a670d
https://git.kernel.org/stable/c/d736eba9c453fedce664fdf592c8b71ecff1932b
https://git.kernel.org/stable/c/d8ac49391a1562dc784fc91e810e696284cb647e

Configurations

No configuration.

History

17 Sep 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-17 17:17

Updated : 2026-09-17 17:17

NVD link : CVE-2026-90119

Mitre link : CVE-2026-90119

CVE.ORG link : CVE-2026-90119

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-90119", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "c5c7c7b6cfae73c46e4544a9ef08ff89231a670d", "versionType": "git"}, {"status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "d8ac49391a1562dc784fc91e810e696284cb647e", "versionType": "git"}, {"status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "b15782627b6562f7b6d628f4699316f26340f835", "versionType": "git"}, {"status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "24b399f51812d727dc25d7814c4d7e0cca38201e", "versionType": "git"}, {"status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "d736eba9c453fedce664fdf592c8b71ecff1932b", "versionType": "git"}], "programFiles": ["sound/pci/ice1712/ice1712.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"status": "unaffected", "version": "0", "lessThan": "5.15", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.157", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.110", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.52", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.6", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/pci/ice1712/ice1712.c"], "defaultStatus": "affected"}]}], "published": "2026-09-17T17:17:04.080", "references": [{"url": "https://git.kernel.org/stable/c/24b399f51812d727dc25d7814c4d7e0cca38201e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b15782627b6562f7b6d628f4699316f26340f835", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c5c7c7b6cfae73c46e4544a9ef08ff89231a670d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d736eba9c453fedce664fdf592c8b71ecff1932b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d8ac49391a1562dc784fc91e810e696284cb647e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ice1712: Fix the card leak at probe error with the auto-cleanup\n\nsnd_ice1712_probe() performs multiple initialization steps after\nsnd_card_new(), but directly returns on failures from later steps\nwithout releasing the ALSA card, causing resource leaks when\nprobing fails.\n\nUse snd_devm_card_new() together with scope-based cleanup\nvia __free(snd_card_unref), and clear the card pointer after\nsuccessful registration to keep it alive."}], "lastModified": "2026-09-17T17:17:04.080", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}