CVE-2026-53291

ALSA: hda/conexant: Fix missing error check for jack detection

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Jun 26, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda/conexant: Fix missing error check for jack detection

In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR().

If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure.

Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f13b8cb5a6920ad98b751d3134686f29810577d4 to before 49c2c5924552e1d2f8b635dee663abebbb7cf63bAffected
  • 2cb659ef0ac744545499e7c37665b276d9e405da to before a2a33e87a2ffce3046c574d24eec4390c27c9365Affected
  • 24d748413cc4e1d97074bae1f335d32d30912f10 to before d68f753d89f4ef6e410d7e8b7e8ab2fdde921b80Affected
  • 7aeb259086487417f0fecf66e325bee133e8813a to before dd110cc00cf854a8ecd8d003127a4178c28574eaAffected
  • 7aeb259086487417f0fecf66e325bee133e8813a to before f837c7b85143a7c54140ff41ad5c076b73cd9933Affected
  • 7aeb259086487417f0fecf66e325bee133e8813a to before 1da5c73f3793b224696617a2a21def7500ba18d6Affected
  • 7aeb259086487417f0fecf66e325bee133e8813a to before b0e2333a231107adedd38c6fcfe1adc6162716fcAffected
  • 4a28302b2c681e3cf85e3b41231fff363c4c6a0eAffected
  • 5.15.149 to before 5.15.209Affected
  • 6.1.77 to before 6.1.175Affected
  • 6.6.16 to before 6.6.141Affected
  • 6.7.4 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.